How we protect broadcasts and listener data: encryption in transit, tenant isolation, role-based access, payment handling and our backup practices.