datascalehr uses AES-256 for data at rest and database-level encryption, and TLS 1.2 for data in transit. Field-level encryption (column-level) is available for all fields and tables for additional PII protection using AES-256-GCM algorithm.