Tigris / HIPAA / Encryption at Rest

To Tigris buckets have automatic encryption at rest? And, relatedly, would a HIPAA BAA signed with Fly extend to the Tigris buckets as a managed service?

Yes Tigris buckets are encrypted at rest. We generally sign BAA separately from fly for other similar use cases