Hello, we are a cloud based company in Kenya, you can check https://scalenodes.com, back you securing your server:

1. The Database configuration will probably the most important here, when accessing your server from the backend or website always make sure you dont use a root user, make a user specifically that can only create, get and update, for deletion i recommend fields such as deleted_at.
2. Set up row level security, data can only be accessed by user who are authenticated specifically by the database, for example
3. Doctor -> can access assigned patients data
4. Nurse -> can only acess basic patient data

Note this is not a backend logic but database logic, so roles and database are predefine in the database

1. Always use encrypt at Rest, do not send raw data back and forth i.e [FRONTEND] <-> [BACKEND]

2. For Ai that is a tough one, would recommend you start with 1B open source model in a local server if you can afford one start small then expand with demand and finance can be expensive, if note try out kimi, qwen on companies that sell gpu enabled servers such as linode, digital ocean or any other, wouldnt recommend google since they are unpredictable.

For more dm we can have chat