Is anyone storing Personally Identifiable Information (PII), such as Social Security Numbers (SSN), in their database? How would I encrypt such a field in the database? I'm expecting that it would be a custom field that is part of a Custom Data Set attached to a contact. However, I've not seen a way to simply encrypt the stored data in the database.
Encrypting the whole database wouldn't be a bad idea, and any ideas about that would be great too, but it seems like these types of fields need their own key sets in addition to anything else.
Yes, I'm aware of CiviHR, but having a completely separate install and database means a lot more complexity than seems feasible.