How to secure a download between two domains

Question

I have a form on "Site A", which submits data to a processor on "Site B" (All cors issues are resolved). The processor on "Site B" sends json back