Encrypting data at rest

One of the requirements from a subprocessor of mine is to encrypt all data at rest.

I want to take advantage of the Rails 7 encryption (https://edgeguides.rubyonrails.org/active_record_encryption.html)

I was tempted to use Lockbox but I'm hesitant to integrate lockbox then switch in a few months. Any idea of a quick and easy way to encrypt the data at rest?

Our Rails 7 branch already migrates from attr_encrypted to Rails 7 encryption. I would recommend using that if you want an early head start. 👍