Encryption
Data in transit
S2 endpoints are secured by Transport Layer Security (TLS), and we always use TLS within S2 when data is transferred between services internally.
Data at rest
Data at rest is encrypted by the cloud systems we rely on.
We are adding support for request-time encryption keys to transparently encrypt and decrypt records on a stream with a key that you control.

