A/V FS is using Debian version 10 with kernel 4.19.36.
The A/V FS web interface can be accessed via HTTPS when the proper certificates are installed.
Also two factor authentication can be used.

The integrated auditing facility provides information about which folders and files are accessed by which workstations and users at which time and day.
A/V FS can be delivered ISO 27001 complaint. AVFS does not do any encryption itself but it can control hardware encryption.