Compliance needn’t be complex