Please consider using one of the top cybersecurity measures listed below:
End-to-end Encryption with AES 256
Session timeout for users
Access privileges based on roles
Authentication with many factors
Add IEC 62304, ISO27001, and SOC2 Type 2 certifications.
Of course, HIPAA, and GDPR must all be followed.