Https is transit level encryption. Application level encryption is encrypting the data inside the https connection, Eg if your post body is encrypted.

And never decrypting the data on the server is one way to handle your question.