Regulatory compliance for AI systems