We apply encryption at multiple levels. For data at rest, we employ storage-level encryption with keys managed through a secure key management service. For data in transit, we use SSL/TLS encryption for network traffic and implement best practices for key management and renewal.