Depending on your compliance needs this may be the only way.