A large financial institution is evaluating test automation tools. Their requirements include: integration with their existing mainframe systems, compliance with strict security audit requirements, and the ability to generate regulatory compliance reports. During the pilot project, the team discovers that the leading candidate tool meets all functional requirements but stores test data in an external cloud service. What should the team recommend?