I have worked on similar projects in finance, where various regulatory requirements prevent using adhoc internal tools.

It's either use an application provided by an authorised third party (who take a cut of every transaction) or become directly authorised to run solo with your own application that meets legislative requirements.