Hardware encryption, sd card, and usb port. The current firmware implements an encrypted "usb stick". Like Bitlocker, but with the addition of per disk-block IVs + MACs.