Compliance, Regulation and Risk: a startup perspective