You can choose to encrypt the contents of a data bag using a locally generated (on your hardware, nothing we control) key.
You can choose to encrypt the contents of a data bag using a locally generated (on your hardware, nothing we control) key.