On your key points, you have a web site that says you do all those things. But so would a malicious actor. You'd need some 3rd party audit to validate you, or e

On your key points, you have a web site that says you do all those things. But so would a malicious actor. You'd need some 3rd party audit to validate you, or even better, do not sell this as B2C, create a B3B version so that banks are your direct customers, and individuals access your product through their existing online banking. Basically, fix the feature gap in banking by selling them the missing parts. (Or, as the other comment says as I'm writing this - just have it run locally. That works quite well, too.)