Admittedly they've done a poor job talking about it on their front page.

But for what its worth, they talk about security of data in accessible (albeit lacking) lay terms here: https://www.permanent.org/digital-archives/services/privacy-...

Not known to me yet is whether these claims have been validated.