Restricting files to certain apps

We are currently evaluating the introduction of Macs in our enterprise. One issue we are currently facing is to fulfil our rather strict DLP (data leak prevention) policy. Is there a way to restrict files (or folders) to be only accessed by certain "managed" application as this is possible with iOS (and open-in)?

Or are there some other technologies in place (containers, etc...) to make sure that files downloaded from company resources cannot leak to unmanged applications and sent / moved from the device?

Any help appreciated!

Thanks

Marcus.