You don't need byzantine fault tolerance within an organization. You need at most regular signing. For an example of how this works in the real world, consider the French NF525 system where immutable transaction auditing is legally required. Unsurprisingly, it's not done with blockchain proof-of-waste.

e.g. https://support.mindbodyonline.com/s/article/Best-practices-...