What should the Architect do in order to make sure Universal Health stays compliant? Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a user to document phone calls with the patient. A data audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.