If the data would be considered the customer's, it would have made sense to use application-level encryption [1]. Each user has a unique key which should be the

If the data would be considered the customer's, it would have made sense to use application-level encryption [1]. Each user has a unique key which should be their property. If you need to give access to that data without the user's consent, you'll need to store their unique key for them. You'll better do that in a very secure manner. If now somehow the database gets exposed, good luck! You'll also need to get the individual keys to decipher everything. Then, although still you can be blamed for not using a vulnerability scanner, there is much less at stake. [1] https://www.compose.com/articles/encrypting-sensitive-data-in-your-mongodb-database/ https://www.compose.com/articles/encrypting-sensitive-data-i...