You can now help protect sensitive data from unauthorized access using dynamic data masking (DDM), a server-side, policy-based security feature in Azure Cosmos DB. DDM dynamically masks data for non-privileged users, ensuring that sensitive information is redacted in real time before being presented to applications, while the original data remains unchanged in the database.
DDM can help your organization meet security, compliance, and regulatory requirements by limiting exposure of sensitive data, including personally identifiable information (PII) and protected health information (PHI).