Data encryption at rest is a mandatory step toward achieving data privacy and compliance. Data at rest is encrypted by default in Azure Storage and Azure SQL Database. Many other services offer default encryption as well. Azure Key Vault can be used to store the keys that access and encrypt the data. The following Azure services support one or more of the encryption-at-rest models.