When I say "client side encryption", I'm referring to the database client, which in most web apps is actually code running on a private server (i.e. browser cod

When I say "client side encryption", I'm referring to the database client, which in most web apps is actually code running on a private server (i.e. browser code makes API calls to a server running something like Python, Node or Java, and that server code makes calls to the DB - it's on the server where PII is encrypted). That said, you can also use the SubtleCrypto API in the browser to encrypt data before it is even sent to the server.