Describe a secure architecture for a web application that handles sensitive data at American Express Global Business Travel.