All of the following are encrypted by default for delta sharing.

• All traffic between the control plane and compute
• All traffic between the user and the control plane
• All storage in the Databricks account
• All EBS volumes
• All traffic to AWS APIs

With Compliance Security Profile for Compute in your Network

• HIPAA
•    PCI-DSS
•    FedRAMP Moderate

AND SEVERAL PECB certified.