Compliance in the cloud