[meiraleal]

> we encrypt everything at rest

And where are the keys stored?

[dioptre]

We use Amazon’s key management service.