The preview of data encryption for Azure Database for PostgreSQL—single server is now available. Data encryption with customer-managed keys for Azure Database for PostgreSQL—single server enables you to bring your own key (BYOK) for data protection at rest. It also allows organizations to implement separation of duties in the management of keys and data. With customer-managed encryption, you are responsible for, and in a full control of, a key's lifecycle, key usage permissions, and auditing of operations on keys.