Mastodon can help you with the first part - you own the server and all the data on it. AFAIK there's no encryption of data at rest so you'd need to add that, but if you own the server it's less of a concern.