...
A: TLS and SSL are used to encrypt all data in transit. Passwords are encrypted with Bcrypt (Blowfish) with random salts and HMAC authentication.
Data at rest is encrypted (databases) are not encrypted but backups are encrypted using AES256.
Q: Please provide details of encryption and key management.
...