Compliance as a service