Ask HN: How do you encrypt your application/database data?

It seems to be a topic that isn't discussed quite as much as other architecture, possibly because the answer is common.

Encryption At Rest is pretty commonplace in several areas, so I'm more interested in the live data that is being used or frequently retrieved / reported upon.

Do you:

a) Not encrypt anthing - just at rest, as the (v)LAN is trusted.

b) Use database built-in (row-level) encryption.

c) Encrypt everything within your application such that nothing is persisted from it without first being encrypted at an application level.

d) Other.

I'd be particularly interested to know if anyone solves this problem whilst supporting any database, although I suspect this is a limited scenario.