This question may mistakenly arise because Reg. 3(5) of the SEBI Prevention of Insider Trading regulations require SDD not be outsourced but maintained internally.
Listed entities and intermediaries can very much use software provided by vendors, however the installation and deployment of such software must be on an internal server owned/ controlled by the company itself or in a tenanted cloud solution that meets all the required criteria as clarified