OCI provides default encryption for data at rest and in transit.

Only customers can manage encryption keys through third-party services.

Encryption must be manually enabled for each storage bucket.

Data is encrypted only in transit but not at rest.