I have an application which stores sensitive customer data in a database on our internal network. Employees can also access the data remotely.