A media company is designing controls for its cloud object storage repository. During a lifecycle review, the security architect maps where each protective control should be applied across the cloud data lifecycle. The team wants to ensure that data is protected the moment it is committed to durable storage in the repository, but before it is later processed by analytics workloads. In which phase of the cloud data lifecycle should encryption controls first be enforced to meet this requirement?