I offered self-hosting to bypass this. It did the trick and I was able to convert the enterprise customers where compliance was a red line.