private company compliance