Before a platform reaches your analysts, it has to clear procurement, satisfy InfoSec, pass legal review, and in many organisations survive a finance sign-off that nobody budgeted for.
For UK security teams, that process carries specific requirements.