BitLocker with TPM really is the best choice. Lots of other encryption methods require you to authenticate before the Operating Systems starts so that would make remote access very difficult if you had to restart.

You can use BitLocker-To-Go on the backup drives. That would encrypt the backups.

Sandeep Luthra | LTMedical.net
2023 Practice Systems now available