How does Alarm.com encrypt Dual-Path modules for user security?

Subscriber data is segregated based on the subscriber id and implemented all throughout the application layer logic. Communication between the panel and backend is encrypted with at least AES 128-bit (or equivalent) encryption for data transmission. The web application servers reside in a DMZ network (segmented by a firewall from all other networks) that permits inbound web (HTTPS) traffic to the load balancer, which distributes traffic to each of the web application servers.   

The application servers establish connections to the database servers and other backend servers, which are on an internal network, also firewalled from all other network segments.