Your data is encrypted in transit (TLS) and at rest on infrastructure operated under a strict access model. Responses are stored on a managed platform with row-level security so that a given profile is only readable by the authenticated owner. Security controls are aligned to SOC 2 / ISO 27001 principles.