Account data is encrypted only in a POI device approved under PCI PTS with SRED, the unexpired approval listing matching the deployed devices on model, hardware version, firmware versions and SRED as a listed function, and SRED enabled and active on every device.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.