Using Realm built-in encryption with the iOS / Android Microsoft Intune SDK

Question

Hi,

I'm adding the iOS Intune SDK to an existing app that uses Realm to manage data.

The Intune SDK documentation states that it "requires that applications use Intune encryption on any files saved to disk". Since Realm has built-in encryption, using AES-256 and SHA-2 HMAC via native iOS APIs (thus it should be FIPS 140-2 compliant), can it be used instead of the Intune encryption APIs and still keep the app compliant?

As an alternative, can we use Realm encryption but using a key that in turn is encrypted using Intune APIs? So the data is not encrypted by Intune, but the encryption key is.

The same question applies to Android.

Thanks in advance.