...
The source of truth for Customer data is our production database house in AWS Aurora. Aurora provides an encryption-at-rest storage layer using RSA2048 bit SHA256-managed keys and provides encryption-in-transit using SSL. Elastic search, used to provide caching of customer data and long CP historical data is provided via a managed service and also provides encryption-at-rest and encryption in transit via SSL.
In addition to the application database, CallPotential uses Snowflake data warehousing to power its reporting and BI offering. Customer data is pushed into Snowflake at a routine interval using an SSL/TLS1.2 or higher connection from within the CallPotential application's Virtual Private Cloud (VPC) with no intermediate caching of data. Data housed in Snowflake is not accessible to CP services or CP personnel except for those working on the data team. Snowflake data is only accessed via the BI tools we provide in the application.
...