Giving them access to a hosted VM may be an option as we will not allow any sort of remote access into our network due to some of the sensitive projects we have.
The forms are pretty basic so far in terms of functionality, if they want to go ahead all reporting will be SSRS reports, the only reason for MSAccess at this stage is the development time to create the DB and visual interface is significantly less than the equivalent POC in SQL sever with a java or c# front end.
I have been looking into the ms hosted sharepoint option as its very cost effective solution to publish the db on the web but time consuming to setup the sharepoint server. But once done we can use it to share other POC's.
MCITP SQL 2005, MCSA SQL 2012