Architecting Secure RAG Pipelines for Proprietary Company Data