With respect to the Windows Azure security, the Windows Azure Service Bus is a Microsoft-provided Platform as a Service (PaaS) with no consumer-created infrastructure. Therefore, all intra-datacenter Service Bus traffic would be subject to Transport Layer Security (TLS) with at least 128-bit encryption.
If Blackbaud hosts your data, this is how the encryption occurs:
Mobile App <SSL> Mobile Application Server <SSL> Blackbaud Mobile Service <ODBC> The Raiser's Edge database
Mobile App <SSL> Mobile Application Server <SSL> Windows Azure <SSL> Blackbaud Mobile Service <ODBC> The Raiser's Edge database
Please refer to the trust center for Windows Azure for more information.
SSL = Secure Layer Sockets
ODBC = Open Database Connectivity
Data that is stored locally on the device (profiles marked as Favorites in the app) can encrypt data stores as follows:
Blackberry: Encrypts and signs to the app with native BB methods that use Advanced Encryption Standard (AES).
Android: No native encryption. File data is protected by built-in operating systems permissions and is not generally accessible to users.
iOS: Encrypts all local data in AES 256 if device security is set.
Windows Azure is included as part of the Mobile Service. Clients will NOT need to set up an account or pre-pay for its usage.