Record level security

Hi All,

My company has a corporate AS/400 that stores orders that we pass back and
forth between about 40 different companies.  The orders have sensitive info
like credit card numbers and such that shouldn't be viewed by all of the 40
companies.  In this scenario each of the 40 companies has their own IT staff
that writes query tools to view the data on the corporate machine.  Is there
a way for me to restrict access so they can only see orders they are allowed
to see at a system level? (i.e. They can only see orders where they are the
sender or receiver)

Thanks in advance,
Aaron Bartell