Keys obtained from the steps described in the Data flow: BBM Enterprise key exchange process topic are stored locally on the device, in the BBM Enterprise application database. The database’s content is encrypted. For more information, see the BBM Enterprise application encryption for data at rest topic.