Azure Cosmos DB for MongoDB vCore always keeps data safe by using AES-256 to encrypt it when it is stored. This protection works with any cluster setup and is managed with a special service key.