When speaking about data confidentiality, data is encrypted at the application or Simple Object Access Protocol (SOAP) level, above the transport layer. AFOD service is accessed via HTTPS over a VPN connection which encrypts messages and payloads using TLS protocol.