There is a couple different ways to do this.
This can be done in the form. Create a second submit routine and use conditional rules so that depending on status it would submit to one location or the other. You could also have two buttons and then hide show the appropriate one depending on the user / status combo.
Another way I have done things that is similar is that I had a copying service running which always was checking one file location (library) and then copying or moving any new file to a second secured location. The user would submit a form to a public library and then within 10 seconds it would be moved into a secure location.
You may want to check out the Database Accelerator too. It allows you to secure your forms in SQL server and has Active Directory integration so that you can control permissions on the form. It also has workflow and routing so that your managers can be notified and see their pending items for approval.
Qdabra Database Accelerator Suite Version 2.0 - Developer
Contact me if you would like to see a demo.