Each was encrypted before and after. The keys were stored securely and retrieved temporarily and then rotated I think. It’s a process I wasn’t 100% privy too as I was too junior.