Regulatory compliance for financial firms