Check that it's alright with staff to be naming a keylogger after the site.
Also, make sure you have the capability to log IP addresses. That way, if someone's logged in all day, you can check their IP and boot them offline. As for logging the bank pin, I suppose you could allow it to record...