My hope and suspicion is that they’re storing a one way hash of the data to create the signature.