Encryption at Rest

According to MDI documentation, MDI Portal tenant data is encrypted at rest, although doesn't support BYOK. Is tenant data encrypted using a unique tenant key generated for each tenant, or are keys shared across multiple tenants?

Thank you!