Your company uses a proprietary encryption algorithm to secure sensitive data. A custom cryptographic assembly was developed in Microsoft .NET and is used in several applications. A SQL Server Integra

A SQLCLR function requires CLR integration to be enabled on the Azure SQL Database instance and adds per-row remote invocation overhead rather than processing rows inline within the SSIS data flow.

The Script transformation is a data flow component that processes rows inline as they pass through the pipeline, allowing it to load and invoke the custom .NET cryptographic assembly without requiring CLR integration on the destination database. This approach requires only a project reference to the existing assembly inside the Script transformation, minimizing development effort. Because encryption occurs in-process within the data flow, it also avoids the network round-trip overhead associated with database-side approaches.

A SQLCLR stored procedure also requires CLR integration to be enabled on the database and executes outside the SSIS data flow pipeline, adding network round-trip latency for every encryption call.

An SSIS Script task is a control flow element that executes between data flow tasks rather than inline within the data flow, so it cannot encrypt individual rows as they stream through the pipeline.