what are you all doing for secure DMS?

What the title says. I was looking into paperless-ngx but it seems to offer no built-in security. I'd ideally want some kind of encryption and if i enable remote access have some control over sensitive documents