An AEMaaCS customer wants to have a sub section in site to accept data from...

An AEMaaCS customer wants to have a sub section in site to accept data from an end user, which may be text as well as documents. The site is expected to have high data input which would need moderation and masking before making it live for public access. Due to a legal content policy, the data collected through the site cannot be shared outside the organization. What would an architect recommend?