We are looking at using DNN as a base to store more personal information than the defaults... it all needs to be secure.

What encryption options does DNN have/offer?

https / SSL obviously...

But can the SQL database be encrypted (so a copy can't be taken without the decryption key)? What are the mechanism of how this would work (is it all SQL or does DNN drive it)?

We want to avoid someone from stealing the db and having access to the data. We also want to build some custom components to dip into this personal information stored in DNN, so would need to access this data.

Any other things to consider?