We use encryption at rest on all database files and database backups, plus we use SSL (TLS) encryption on all data in transit.
 
Resource files are also encrypted at rest inside Amazon S3 using Amazon's S3's file encryption.