Hospitals use O365, there are HIPAA-compliant editions of any prominent cloud service.