Yes - we use Amazon S3 and Heroku. Sensitive customer data is encrypted at rest and when traversing over public networks.