Yes, all traffic over the private network (*.railway.internal) is encrypted using WireGuard tunnels with ChaCha20, Curve25519, and BLAKE2s cryptography, and it never leaves our infrastructure.