Regardless of the active role, all data passes through Gravity Forms Encrypted Fields (AES-256) and all files are locked by PDA Gold before hitting the single-tenant database.