All items are individually encrypted with a unique AES-256 bit key. RSA 2048 to 4096 bit keys are used to secure the AES keys. Encryption takes place on the sender's machine and decryption takes place on the recipient's machine. Data remains in the encrypted format while stored on our secure servers and is never available in plain text. Data is kept on our servers and is never forwarded from server to server. In addition to the end-to-end encryption transmission channel layer encryption is also used similar to TLS/SSL. Session data, including login initialization is also encrypted. Full security brief is available as a separate document.