You can use separate repos for sensitive documents instead of one big repo.

The biggest challenges will be:

- Teaching git to non-technical folks, the HR lady doesn't know how to resolve a merge conflict and probably doesn't want to

- They also don't want to learn markdown or latex

With a small enough company though, this could work.