I think it should be fine, i get the data from a MySql database belonging to an external supplier. We have only allowed the connection from their IP so shouldn't be a problem?