Application data is hosted in an Amazon data centre in Australia while the database is hosted by another cloud provider called Object Rocket, also in Australia. The database is encrypted at rest and all communications between the application and the database are encrypted via SSL.