datascalehr stores encryption keys outside the database, at environment level.

Key generation, storage, backup and restoration are fully automated, and no datascalehr staff member views or handles key values.

Mendix manages the keys for platform-level disk and database encryption.