I have a client that has 150 Windows365 cloud PCs and a handful of AVDs. I attempted to use BitLocker to cover the disk encryption requirement, however, the cloud PCs (enterprise level, Win10) do not have SecureBoot enabled and without I can't enable BitLocker. I did some reading and the cloud PC disks have Azure Server Side encryption, which in my opinion would cover the disk encryption requirement, does anyone know if this is the case? The client is using Vanta and Vanta is reporting that all of the cloud PCs are "not encrypted", based on the API call it uses. I'm trying to avoid using 3rd party encryption but at this point I don't have a definite answer as to whether these cloud PCs are compliant.

Anyone have information or experience on this?