What types of items can Azure Information Protection encrypt?

Azure Information Protection (AIP) is a cloud-based solution that helps organizations classify and protect their documents and email messages by applying labels. These labels can be configured to apply encryption, visual markings (like headers or footers), and restrict access permissions. This ensures sensitive information remains protected regardless of where it's stored or with whom it's shared. While encryption is a core security feature in Azure, AIP specifically targets data at rest and in transit within documents and emails. Network traffic is secured by protocols like TLS/SSL, not AIP. Azure Storage accounts and Azure SQL databases have their own built-in encryption mechanisms (e.g., Storage Service Encryption, Transparent Data Encryption) that operate at a different layer than AIP.