Yes. All data in transit is encrypted with TLS. All data at rest, including the database, database backups, and file storage, is encrypted with AES-256. Credentials for connected mailboxes are additionally encrypted at the application level before storage.