Azure Cosmos DB holds the data in encrypted form while at rest and even in transition. It holds certification for a variety of compliance standards and adheres to strict security standards/policy. It also provides row-level authorization.