# Encryption: Data-at-rest

Ensuring the security of your data is a top priority for Redox. 

Redox is hosted in the designated AWS regions. [View AWS regions to allow-list](/security/allow-listing-for-redox). We replicate data across multiple availability zones within a given geography for redundancy and disaster recovery.  

We use the built-in encryption mechanisms of the platform host to encrypt all databases, data stores, and file systems storing confidential data with AES-256. Also, we rotate the keys periodically.

## Local disk or volume encryption

For local disk encryption of end-user devices, we follow the defined best practices for macOS and FileVault for encryption and key management.