You can just ask GPT how to do it. Much like a lot of web dev!
I ask because we are about to produce a similar policy at work. We can see the advantages of it, but likewise, we can't have company data held in their systems.
I get the IP angst, but some companies think their GetGenericObjectFromDB() REST bs is secret sauce.