What kind of information would reassure me about your data privacy?

I'm still a bit unsure how my client's information is handled in this case. Can you provide more details?

Do you encrypt at rest?

Where are your servers located?

Does data security apply immediately upon signup, regardless of firm size?

Are there situations where your data security rules would not apply?