Microsoft uses several encryption technologies to secure data. Encryption technologies and platforms used include the following:
- BitLocker
- Azure Storage Service Encryption
- Distributed Key Manager (DKM)
- Internet Protocol Security (IPsec)
- Transport Layer Security (TLS)
Depending on the data's activity status (at rest or in transit) and in which service it resides, encryption may be 128-bit or 256-bit AES. Many Microsoft 365 services also allow customers to manage their own encryption keys, further restricting access to their data.
You can learn more about the encryption protocols and standards used at https://docs.microsoft.com/en-us/microsoft-365/compliance/office-365-encryption-risks-and-protections.