The following encryption is in place for S2C:

Microsoft Azure

Amazon Web Services

Generic

Data encryption

Data in transit encrypted

Yes

Yes

Data at rest - data encrypted -

Yes (hard drives are encrypted)

Yes

Data at rest - documents encrypted

Yes

Yes

Passwords

Yes

Yes

Encryption technologies

Documents

Azure storage service encryption (SSE) uses AES-256

AES-256

Data

Azure disk encryption uses Windows BitLocker technology and Linux DM-Crypt

AES-256

Password

Salted and hashed with SHA 512 algorithm)

Yes (??)

Others

Encryption keys storage

Azure Key Vault

Amazon Key Management Service (KMS)

HTTPS

TLS 1.2

TLS 1.2

Only TLS 1.2 is supported. Lower versions are deprecated.