You deploy it on your own database, so I suppose your information security depends on you (or the DB-as-a-service provider you choose).