You have a few options.
1) You can use TDE on the SQL databases if you're running SQL Server Enterprise.
2) You can use BitLocker on the SQL database volumes.
3) You can use IRM, such as Active Directory RMS or Azure RMS to encrypt at the Document Library level.