The database provider we use encrypts all customer data at-rest by default using AES-256 to secure all volume (disk) data.