Your IT can't sign off on tools they don't host.
EU research institutions and national agencies have a duty of care over consortium IP. SaaS contracts that put your data in someone else's database fail the audit — before the conversation even reaches the grants office.