Security and Encryption for Storage service

Encryption at rest is enabled by default.

https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-models
Both Blob and Cosmos have options for server-side managed keys. Blob has an option for client-side client-managed key

This storage should ideally not be seen as secret vault or PII data that requires further compliance

No file or test is named in the issue. Start by locating the Storage service documentation and compare its encryption-at-rest wording with the linked Azure encryption models page. Done means the documentation clearly explains the storage encryption options and whether additional compliance treatment is expected.

Written by the indexing model from the issue text.