Help with a Database Problem – Advice Required

Would you mind if I troubled you for some help? Im working on an NDAed project and weve been asked to try and address a problem which is currently causing some pain.

Imagine there was a merger between two blue-chip communications/media companies, and Company A was offering discounted deals to the employees of Company B. The staff members of company B would need to apply for these benefits and complete an application form with applicant details, including employment status details and some sensitive info e.g. Bank Acc details. The form would then be passed to a vetting team in company B to confirm the claimed employment status before authorising and passing the application form to company A to process. The challenge we have is that we dont want the vetting team in company B to see the sensitive data contained in the application forms (for obvious reasons). The application form its self is hosted on Company Bs intranet.

What Id like some advice on is how feasible or complicated this ask might be from a DBA/Development perspective (notwithstanding I havent given you tons to go on).

My initial thinking is that we could potentially get the details of the populated form passed into a database, and then only the non-sensitive details passed to the vetting team to action. Could this be something that we could potentially address with an RPA process?

I'm open to suggestions :-)

Many thanks in advance.