I can only imagine what a pain it would be to get InfoSec approval for such a tool, unless it's doing everything on-device.
At least my bank was comfortable with cloud everything and people using APIs from approved partners. If you can write the report in Google Docs, as long as they were the ones plugging in their API key for the OCR, I imagine it would be fine.
P.s: I run the linked resource.