Financial institutions need privacy, but they also need ways to prove what happened.