The data is held in a multi-tenant database architecture hosted at Secura. The applications are regularly tested for integrity. For additional detail, please request our data security document.