I don't know if this is even possible within the boundaries of third-party clients, but as an admin I would like to prevent users from exporting contacts data from Mac and iOS Contacts.app (and even the website itself).

Our users have no legitimate reason to use company contact data beyond their company devices, so this kind of granular control would be appreciated.