We have a web server running web application and SQL Server.

Our developers have access to that server with Admin privilege and regularly upgrades the applications and add new stored procedures.

However, the database in it contains sensitive information which we do not want them to see, or even download.

Question:
What is the best possible arrangement to prevent developers from accessing sensitive data?