Company policy requires stored procedures for database