I'm creating a website for a client's medical practice and they want to create a way of scheduling an appointment that interactes with their scheduling service. To do this, I am just going to create a basic form that sends the data to the scheduling service API. However, I'd ideally like to make sure this secure (especially since it needs to be HIPAA compliant with the way that they handle data. Is it possible to run this serverless function using Vercel on my Next site, or do I need to host a seperate server that can run these functions?