There is no need to worry about the data while it is in transit, as the device itself is packed in a tamper-proof case and all the data that is being transferred is automatically encrypted via the AES256 encryption protocol. You have the ability to provide custom encryption keys via the KMS service when compliance requires you to control all aspects for encryption.