In addition to application, database, or operating system level access controls, we encrypt data (as required by regulation, our client contracts, and our corporate data protection policies) using strong, industry-standard encryption technology when not under the strict controls of our host systems.