title: How to secure user data in the database with Rails?
body: <p>I am creating a rails application that needs to store a large amount of sensitive data.  To assure my customers that the data is being protected, I want to encrypt it on a per-user basis.  I have done research looking for gems that can accomplish this.  So far I've found <a href="http://github.com/spikex/strongbox" rel="noreferrer">strongbox</a> and <a href="http://github.com/bitzesty/safe" rel="noreferrer">safe</a>.  Together, this would seem to provide a solution for me.  </p>
  
  <p>However, I am wondering if this is a common practice.  It would seem that most rails applications have some sensitive data to store regarding their users.  <a href="http://github.com/binarylogic/authlogic" rel="noreferrer">AuthLogic</a> is handling my password encryption, but emails and other personal data are just as sensitive.  Is it common practice to leave these items unencrypted in the database and assume that it will never be compromised?  I understand that the database resides in an area that can not communicate with the outside world, but a determined attacker could easily compromise this.  Is it common practice for Rails developers leave their data unencrypted and simply trust the security of their web server?</p>