You can now encrypt sensitive data inside your client application before it gets stored in your database with Always Encrypted for Azure Cosmos DB. This means you can ensure that confidential parts of your data sets are only available to appropriate audiences, and you can encrypt your data on-premises to comply with regulatory requirements.
Learn more.