Multi-layered Encryption
Your search indexes are always encrypted and the data fed into the search indexes is encrypted with keys unique to each user. No data is stored unencrypted at rest, anywhere.
Secure Transmission
Connections between clients and servers are always encrypted with verified SSL. Connections in the datacenter between servers are always encrypted. Connections between servers are locked down by source, destination, port, and protocol. Each server has local application and network firewalls. Local server networks are effectively air-gapped from each other. Single point of entry- one way in, one way out. Principle of Least Privilege (POLP) for users, administrators, daemons, etc.
Monitoring
All server logs are sanitized for sensitive data before they are sent to an aggregator where they are analyzed in real-time. Anomolous behaviors are investigated. Full network intrusion detection monitors every packet that enters or leaves our datacenter.