AES 256, The entire application sits on ours own Virtual Private Cloud, made up of two subnets -
One public subnet for the Web/Application, with only ports 80 and 443 open to the world.
One Private Subnet, only accessible from the Public Subnet, it is not possible to get to the Private Subnet from the Internet - Not even for us.