How can AI detect compliance risks before regulators do?