Always Encrypted is a database encryption technology that can secure sensitive data stored in an Azure SQL Database and SQL Server on-premises, such as credit card numbers or national identification numbers (for example, U.S. social security numbers). It helps protect data at rest on the server, during movement between the client and the server. While this data is in use, it can ensure sensitive data never appears as plaintext inside the database system.
The client encrypts the data inside the application and the encryption keys are never revealed to the Database Engine (SQL Database or SQL Server). This results in Always Encrypted separating the data into who owns the data (and can view it), and who stores and manages the data (but should not have access to it). This way, organizations can confidently store sensitive data securely without having control over it, ensuring that on-premises database administrators, cloud database operators, and other...