compliance exposure