Audience asks about ActiveRecord encryption in the context of PII and data obfuscation. Sergyenko: first preference is not to store sensitive data yourself (use third-party EHR/metadata). If you must, encrypt it — encryption is hygiene, a must. Obfuscation is separate: you decrypt real data, substitute with fake, and re-encrypt for dev/staging/integration with different keys. The two concerns don't interfere.