You can always set up a UDF that is only visible to select few people which grossly in violation of the CC rules. but if they never get caught or have a breach, who is to say differently. Might be a great time to show them the CC module and SPS. Perhaps the ease of use will offset any cost savings they have with the bank. But then again, maybe one of the loan covenants is that they have to use the banks processor.