audit-ready proof of compliance