How does the system protect data at rest (storage)?

Storage at Client site - so Client managed.