Precautions when sharing a TM and TB with a translation company

Hello,

Are there any precautions I need to take? I'm in charge of handling my company's translation resources and we're going to start sharing our TMs and TBs to reduce outsourcing fees and improve consistency. The only precaution I can think of is by setting the access rights as below. Is this too tough? Too light? By not having a guest password enable them to the same rights as a guest but without having the need to put in a password, right? Is this sufficient? Is there any such setting for TBs? Anything else? Also, we do have an NDR with the translation company.

Or thinking from another perspective, what is the preferred state that a translation company would want when receiving resources from a company? 

Any advice would be appreciated.

Best regards,
Keenan