What encryption does the Cado platform use in GCP?

The Cloud Storage Bucket is configured to encrypt data at rest using GCP KMS and if using Cado Host to upload triage captures. Data is then encrypted using TLS by the GCP API client. Secrets are stored using Google Cloud Secrets Manager.