In a 3rd move, the proxy asks the API for C. The API checks if B has the rights to use C after which forwards C to the proxy.
Most organizations will not collect customer's identification to build user profiles to https://antonibhw065819.blogscribble.com/30720111/the-basic-principles-of-data-loss-prevention-confidential-computing-tee-confidential-computing-enclave-safe-ai-act-confidential-ai-data-security-data-confidentiality