Walk me through how you would architect a secure, compliant environment for a healthcare client handling sensitive patient data.