Managed ERPNext for Malaysian businesses. One isolated site and database per business, on Malaysian infrastructure, with backups that are verified by restoring them.
yourbusiness.erpmy.com, with TLS.Backups run nightly and are copied off the box. Each one is then restored into a throwaway database and its rows counted before it is accepted.
A backup that exists is not a backup. A backup that restores is. A separate watcher checks that a fresh copy has actually reached off-site storage, so a backup job that silently stops running is noticed rather than assumed healthy.
Updates are applied in a scheduled overnight window, with a full backup taken before any database migration, and a rehearsal of that migration against a copy of production first.