Transparent data encryption (TDE) helps protect Azure SQL Database, Azure SQL Managed Instance, and Synapse SQL in Azure Synapse Analytics against the threat of malicious offline activity by encrypting data at rest.
For the Hyperscale service tier in Azure SQL Database, TDE with bring your own key (BYOK) support is now available in preview. TDE with BYOK gives customers full and granular control over usage and management of the database encryption key (also known as TDE protector) and enables central management of keys in Azure Key Vault.
Learn more.