SSL certificates from Let's Encrypt, grade A on Qualys SSL Labs test.
Encrypted object storage at rest
MinIO assures confidentiality, integrity and authenticity with negligible performance overhead.
Log in via Github, where you can enable 2-factor authentication.
Project servers are isolated from other servers, and have firewall protection.