Community Access Tracking

We would like to convert our community access tracking forms for our clients into a relational database with many of the re-used fields as drop downs which can also be edited along with relevant reports by clients, site, type of activity etc and direct SQL access to run custom reports. Preferably in PHP/mySQL. It would need a secure login structure with 2 management levels (1 for us, and another to offer to other companies as SaaS) along with individual user logins. Would used 2fa through authenticator apps. We would host it in the end on a provider of our choice for HIPAA compliance.