Zerto does not natively encrypt data across the WAN. Communication across networks can be encrypted using network encryption software such as VPN and Ipsec.

AWS: Elastic Block Storage (EBS) encryption is enabled by default.

Azure: Every block blob, page blob and Managed disks that are created by Zerto, are Encrypted at-rest on the Microsoft Azure platform, using the Microsoft-managed default key.