The application is using SSL certificate(SHA-256) between the application and web browsers. While the the data source  is using azure cloud security with hardened access. While the users sensitive information (passwords etc) is saved in encrypted state and more sensitive information like payment details are not saved in our system and directly communicated to payment gateways according to their specified security standards.