Client side encryption, and no physical access to the outside... and...

Considering that many encryption systems around seem to get broken, I don't think that's the only solution needed.