Nexetic Backup Microsoft 365 is using Microsoft Azure Blob Storage encryption as detailed here: https://docs.microsoft.com/en-us/azure/storage/common/storage-service-encryption
We are currently not using a customer-managed or customer-provided encryption keys approach. We are using the default Microsoft-managed keys for the encryption.
These encryption keys are not visible anywhere in our Azure configuration.