Our file storage data is securely stored on a private AWS S3 private data store. All requests for objects/documents require authentication through Orchestra, and are encrypted in transit. Files are streamed via Orchestra and are therefore not directly accessible. All files are also encrypted at rest.
Our database data is hosted with AWS Aurora. Data is encrypted at rest and during transit and is a resource only accessible through AWS resources with strictly and specifically defined access. The database is also network isolated, and database back-ups are fully encrypted.
Our servers are also hosted on AWS. All file systems, and traffic between servers, are also encrypted.