[amaks]

I've been primarily concerned if they store data encrypted at rest, with my own key.

[mikmak]

yes every bit is encrypted with AES-256-CBC, we provide the encryption key which you must keep to restore

Mik