> For example, in a regulatory environment, I could see managing PHI data

This is exactly why I have a spare box running Wekan in my office at work. We run clinical applications for a hospital; sometimes project tracking+testing involves PHI that we have to be super careful about letting into the outside world.