ZUAR corporate policy is that all customer sensitive data is stored in a customer dedicated VPC location.  No sensitive data live on ZUAR hardware.