The following encryption is in place for MSTC:

Microsoft Azure

Amazon Web Services

Data encryption

Data in transit encrypted

Yes

Yes

Data at rest - data encrypted -

No

Yes

Data at rest - documents encrypted

Yes

Yes

Passwords

Yes

Yes

Encryption technologies

Documents

Azure storage service encryption (SSE) uses AES-256

AES-256

Data

Azure disk encryption uses Windows BitLocker technology and Linux DM-Crypt

AES-256

Password

Salted and hashed with SHA 512 algorithm)

Yes (??)

Others

Encryption keys storage

Azure Key Vault

???

HTTPS

TLS 1.2

TLS 1.2