Data Encryption Overview

Encryption in Transit

When data is transmitted to Azure Cosmos DB, it is encrypted using HTTPS. This ensures that any data sent over the network is protected from eavesdropping and tampering. Azure Cosmos DB supports the TLS (Transport Layer Security) protocol, providing robust encryption during data transmission.

Encryption at Rest

Data stored in Azure Cosmos DB is, by default, encrypted at rest. This means that all databases, attachments, and backups are encrypted using AES-256 encryption, a military-grade standard designed to protect sensitive data against even the most advanced attacks. The encryption keys are managed by Microsoft.

This dual-layer encryption approach ensures that your data is protected both during transmission and while it is stored, providing comprehensive security for your systems.

QR Code is a registered trademark of DENSO WAVE INCORPORATED in Japan and other countries.

Was this helpful?