User data is encrypted in transit via HTTPS/SSL.
Other frequently asked security questions include:
Who can see or have access to user data?
How do you isolate my data from other clients?
What are your disaster recovery processes?
How do you screen your employees and contractors?
What measures do you have in place to prevent unauthorised viewing of customer data?
