Unencrypted sensitive information: Unencrypted sensitive information may be delivered to customers and to ISP-compliant vendors only by hand, fax, mail, phone, or ISP-compliant delivery service. We do not keep personal information on laptops, or other handheld or portable devices. We store backups on external hard drives and flash drives, encrypted with strong passwords using strong encryption.