I've worked for three different companies that all use some mix of enterprise agreements, self-hosting, and AWS Bedrock to ensure that proprietary data doesn't get trained on. It's not a difficult or complicated problem.