diff --git a/index.html b/index.html
index 754b1be..9cbc02e 100644
--- a/index.html
+++ b/index.html
@@ -2069,6 +2069,16 @@
                     </div>
                 </div>
 
+                <div class="faq-item">
+                    <button class="faq-question" onclick="toggleFaq(this)">
+                        Is my data encrypted in backups?
+                        <svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="6 9 12 15 18 9"/></svg>
+                    </button>
+                    <div class="faq-answer">
+                        Yes. All backups leave our server fully encrypted. Your data is encrypted before it's transferred off your agent's instance, and it stays encrypted at rest. No third party — including us — has access to your client's data. Only you hold the keys to your backups.
+                    </div>
+                </div>
+
                 <div class="faq-item">
                     <button class="faq-question" onclick="toggleFaq(this)">
                         What API keys do I get?