Yes. Included in the as-a-service subscription price is a 650 Mbps site-to-site VPN configuration via publicly-routable IP addresses. This method can be used to connect the as-a-service system and a corporate network using a VPN in which an on-premises firewall/router is used to terminate the IPsec site-to-site tunnel connection, which encrypts all data.
Along with the 650 Mbps site-to-site VPN, also included in the price is 1% (of system size) for data transfer out of the Azure region / VNet. Additional transfers incur additional costs (a pass-through of the Azure egress charges).