Encryption at rest

Encrypting stored data so the ciphertext is useless without the key. It satisfies a real threat model — physical media, backup files, decommissioned disks — and a lot of compliance text. It does nothing against an attacker who has your application's access, because your application decrypts transparently.