I may use this if it supports built-in encryption. Are encryption keys saved on the client or are they saved on your servers?
So you can indeed encrypt your data "at rest" and you would indeed control your own keys. We recommend the 'duplicity' tool which works very well for encrypted offsite backups at rsync.net: