Just a quick follow-up: I'm already working on migrating the data to DynamoDB which will automatically encrypt the data (https://docs.aws.amazon.com/amazondynamodb/latest/developerg...). This will go live soon. But the website will stay the same: I won't say I offer encryption until I have true end-to-end encryption.