How is data encrypted? 

All data in transit is encrypted using industry-standard TLS. Data at rest is encrypted using Microsoft-managed or customer-managed encryption keys. Sensitive secrets are never stored in plaintext.