data's stored on s3, and encrypted before storage -- there'll be another option to enter in an additional passphrase (or private key) when installing in order to encrypt your data before it leaves your computer (kind of like what mozy does.)