The fact that personal and financial data will be hosted on your company servers, tying names and accounts to Bitcoin transactions and wallets, all doesn't pass the smell test, if the code isn't open for inspection.
Of course, there is nothing preventing your company from putting up placebo code on Github, that doesn't actually represent what is running on your servers. I understand that, but as a show of good faith, it would do your company more in the long term by opening the code in addition to providing an API.
Anyway, good luck.