Virtualization-based security (VBS) enclaves are a new addition to the Always Encrypted feature family. They bring the benefits of Always Encrypted with secure enclaves, such as rich confidential queries and in-place cryptographic operations, to all your Azure SQL Database offerings, independent from the underlying hardware. VBS enclaves enable you with the flexibility to protect your sensitive data and match the specific performance needs, budget, and regional availability requirements of your workloads.
Learn more.