I am no security eggspert but I think if you encrypt them while they are waiting on disk to be processed then decrypt them in memory only to process them anD then delete from memory and delete from disk, you will have a better claim to privacy. Also, must transport over SSL.