Heroku - How to encrypt the database

Is there a开发者_开发知识库 recommended way for encrypting sensitive data on Heroku in a way that would satisfy the a large company's IT security compliance requirements?

PostgreSQL has pgcrypto to encrypt your data. The PGP encryption functions will do the job for you, just let Heroku use these functions.

Personally I am leaning toward app-level management of encrypted data in the DB. i.e. each user has its own public/private key stored in a separate DB on a separate server (maybe the app server itself).