It is stored in plain text unless you use the 'Encrypt' feature of Logicity Pro. You would need to encrypt it in Logicity Pro and need Pro on your client side so that they can decrypt it. Note that this security measure still is not bullet proof and I usually recommend folks create dedicated users for running reports to avoid any sort of security issues.
