Compliance.ai Alternatives in 2026: 8 Options Compared, With Sources
In short
Compliance.ai has been part of Archer since the acquisition announced on 20 February 2024, and as of 30 September 2026 its own site tells existing users "your platform is now Archer Evolv Compliance." The alternatives changed owners too: CUBE bought 4CRisk on 19 February 2026 and Bloomberg Industry Group announced its acquisition of Regology on 3 June 2026. Only two of the eight options compared here publish a price.
Compliance.ai has been part of Archer since the acquisition announced on 20 February 2024, and as of 30 September 2026 its own home page tells existing users that "your platform is now Archer Evolv Compliance." The alternatives changed owners too. Regology, a common head-to-head rival, was acquired by Bloomberg Industry Group in a deal announced on 3 June 2026. CUBE completed its purchase of Thomson Reuters Regulatory Intelligence on 31 December 2024, then bought 4CRisk on 19 February 2026.
In this market, an alternatives list without an ownership column is wrong by construction. Any list written before February 2026 shows CUBE and 4CRisk as separate options, and any list written before June 2026 shows Regology as independent. The comparison below is dated 30 September 2026, prints each vendor's own figures with the page and date they came from, and ends with a migration checklist for teams still on standalone Compliance.ai paper.
Shortlists go wrong in two ways: the wrong category and the wrong owner
Two errors to avoid when you build a Compliance.ai replacement shortlist. The first is category confusion. Governance, risk and compliance suites map controls, run audits and manage workflows. Compliance.ai was a regulatory intelligence product: it monitored regulatory publications, classified them with what Archer's release calls a patented EITL (expert review) approach, and routed relevant changes to financial-services compliance teams. Replacing it with a GRC suite replaces the filing cabinet, not the watchtower, unless the suite includes a monitoring layer that watches regulators itself. Some now do: Archer's is Compliance.ai, and Optro (AuditBoard renamed itself on 9 March 2026) describes horizon scanning and obligation mapping on its regulatory compliance page. Ask whether a suite's module watches sources itself or only ingests someone else's feed. If you are untangling which layer you bought, Regulatory Intelligence vs Horizon Scanning vs Change Management separates the stack.
The second error is stale ownership. Compliance.ai's technology now lives inside Archer Evolv Compliance, Regology answers to Bloomberg, and two names that used to sit side by side on comparison lists, CUBE and 4CRisk, are now one company. A vendor list without dates cannot tell you any of that, and neither can the vendors' own pages: they state what they sell, not what a buyer should assume about continuity.
Compliance.ai is live, but its own site now says your platform is Archer Evolv Compliance
The company was not shut down. As of 30 September 2026, compliance.ai is live, its banner says Compliance.ai is part of Archer Evolv Compliance, its footer says it is a product of Archer Technologies LLC, and its home page tells existing users their platform is now Archer Evolv Compliance. Archer's 14 September 2026 release for Evolv Foundation and Evolv Workplace says: "The models, data and experts that came with Compliance.ai now run across all of Archer." The Regulatory Trends blog's newest post is dated 7 January 2025, although free weekly reports were still being posted in July 2026.
For a buyer that is more useful than the blog's age. If you are a standalone customer, plan for your evaluation to become "Archer Evolv Compliance versus the field," and expect the switching decision to run through Archer's contract terms, not Compliance.ai's. Which paper you signed matters more than which logo is on the login page.
The ownership-corrected matrix compares eight options as of 30 September 2026
Three disclosures before you read the matrix below. First, RegWatch is my company. Read that row skeptically; it is also one of only two rows whose price you can check on a public page. Second, every coverage figure is a vendor claim, attributed to the page and date we read. We have independently verified none of them, and as the Archer note below shows, these numbers drift. Third, the whole table is dated 30 September 2026, and each ownership event links to the vendor's or investor's own announcement in the source list.
| Vendor | Ownership and status | Coverage (vendor-stated) | Explainability and AI approach (vendor-stated) | After the alert | Deployment | Published price |
|---|---|---|---|---|---|---|
| Archer Evolv Compliance (where Compliance.ai's technology went; GRC suite with a regulatory intelligence layer) | Archer, owned by Cinven (deal announced April 2023). Compliance.ai acquisition announced 20 Feb 2024; compliance.ai now points existing users to Evolv Compliance | 8,000+ regulatory sources (Evolv page, 24 Sep 2026). Compliance.ai page: 8,000+ sources across 3,000+ agencies, 230+ jurisdictions, 100+ languages | Evolv page says the system "records why it judged the item relevant or not, and stores that decision." Compliance.ai page: models supervised by 130+ in-house regulatory specialists | Feeds Archer GRC workflows (controls, assessments); can also run standalone | Home page says on-premises or SaaS; the Evolv page lists multi-tenant SaaS. Ask which applies | None; the pricing page shows no figures |
| CUBE (includes the former Thomson Reuters Regulatory Intelligence; regulatory intelligence platform) | Hg-backed (significant investment announced 20 Mar 2024, terms undisclosed). TRRI and Oden completed 31 Dec 2024; also Reg-Room (May 2024), Acin (Jun 2025), Kodex AI (Oct 2025), 4CRisk (Feb 2026) | 750 jurisdictions and over 10k issuing bodies (Regulatory Inventory page) | Horizon Scanning page describes an audit-ready, timestamped record of what was reviewed, when and against which obligations | Regulatory inventory; collaborations announced with Microsoft (25 Mar 2026), ServiceNow (14 Apr 2026) and IBM (16 Sep 2026) | Listed on the Microsoft Marketplace (25 Mar 2026) | None; no pricing page |
| Regology, now Bloomberg Regology (AI law library with agents) | Acquired by Bloomberg Industry Group, announced 3 Jun 2026; no financial terms published. Site now trades as Bloomberg Regology | 10,000+ data sources, 135+ countries (home page) | Agents for regulatory change, compliance and research, plus the Reggi assistant, which the pricing page says gives verifiable citations | Alerts, impact assessments, dashboards and reporting; the Enterprise tier lists GRC integrations (for example ServiceNow, Archer, Diligent) | Not stated | Reggi free for individuals. Professional $1,700 per user per month on a 3-year contract, US federal and 50 states. Enterprise on request |
| Corlytics (regulatory intelligence with enforcement-risk analytics) | Verdane majority equity stake announced 9 Apr 2024; bought a Deloitte UK RegTech platform 7 May 2024; earlier ING SparQ (Jan 2023) and Clausematch (Jul 2023). New CEO from June 2026 | Source and jurisdiction counts not stated on its monitoring page | Taxonomy-driven, per its monitoring page | Impact assessment workflow and APIs to GRC systems (monitoring page); policy management through Clausematch | Not stated | None; /pricing returns a 404 and the call to action is a demo |
| Wolters Kluwer OneSumX for compliance (content plus change workflow, bank-focused) | Independent public company. Sold its Finance, Risk and Regulatory Reporting unit to Regnology (closed 1 Dec 2025) and kept OneSumX for compliance | RCM data feed: over 700 regulatory bodies and agencies globally. Reg Manager: US federal and state regulators | Reg Manager page: a feed "fueled by AI and curated by compliance experts" | Impact assessment, audit trail and dashboards in RCM | Not stated | None; demo request only |
| Zango (AI compliance layer for financial services) | Independent; $4.8M seed round led by Nexus Venture Partners, announced July 2025 | 700+ regulatory authorities across 120+ jurisdictions (product page) | Describes AI agents for scanning and obligation mapping | Impact and obligation mapping, policy and control management, gap analysis, evidence trails | FAQ says the storage location of your data is configurable | None; book a demo |
| Harvey Horizon Scanning (legal AI platform feature) | Feature launched 1 Sep 2026 in Early Access for Harvey customers. Harvey raised $550M at a $15.5B valuation on 9 Sep, extended to $600M on 24 Sep | 12,000+ sources across 100+ jurisdictions plus public sources you describe; hourly updates | High, medium and low relevance ratings with a firm-specific relevance note per update | Drafts for emails, memos, client alerts and policy updates; email alerts, email digests of daily changes and weekly summaries. The launch post says updates show "who it affects, what they need to do, and by when," with a timeline of upcoming obligations | Not stated | None; demo request |
| RegWatch (my company; regulatory monitoring and change management with a legal workspace) | Founder-led | Configured per customer: the regulators, sources and jurisdictions you choose. RegWatch has mapped 136 jurisdictions with their regulators and 57 topics | Each finding keeps its source URL, dates and a verbatim excerpt; triage writes "Why this matters"; dismissing an alert requires a reason; decisions go to a tamper-evident, append-only audit log | An accepted alert converts to an obligation with owner, deadline and evidence; scheduled management reports by email | Hosted, or Private VPC with the full data plane in your own cloud account on AWS, Microsoft Azure, Google Cloud, IBM Cloud, Oracle Cloud or another provider (outbound HTTPS to model providers is still required) | From $799 per month; Enterprise quoted |
Left off the main matrix, with reasons. 4CRisk has been a CUBE company since 19 February 2026, so it is no longer an independent option, although its site still sells HorizonScan and four other products. Ascent was acquired by Edgewater Equity Partners in January 2024, bought the horizon-scanning vendor Waymark the following month, and is still operating. FinregE announced a strategic investment from Moody's on 12 January 2026. Vixio is Perwyn-owned and built for gambling, payments and banking. LexisNexis markets an obligations register and alerting product on separate US, UK and Australian pages, and Legora's Monitors, generally available since 2 June 2026, is the closest counterpart to Harvey's feature. Our horizon scanning tools comparison covers those vendors with sources.
Vendor coverage numbers drift, and Archer's own pages show it
Every coverage figure above carries a date because vendor numbers move. Archer's 18 September 2024 press release described over 2,000 regulatory sources across more than 80 countries and 99 native languages. An Internet Archive capture of the Evolv Compliance page from 8 June 2026 said 4,500+ regulatory sources across 170 jurisdictions. The live Evolv page, last modified on 24 September, says 8,000+ sources; Archer's home page says 7,000+; and the compliance.ai page says 8,000+ sources across 3,000+ agencies and 230+ jurisdictions. Each was a real vendor statement on its day. They describe different products at different times, and none has been independently audited. The discipline our monitoring applies to regulator pages, where the date on the page is not always the original publication date, applies equally to vendor claims: pin every number to a URL and a date, or do not rely on it.
The claim that survives this test is the one you generate yourself: run the candidate tool against your jurisdictions and your sources for 30 days and count what it catches. The manual version of this problem, as teams handle it today, is the subject of how compliance teams track regulatory changes.
Only two of the eight options publish a price, and Regology's covers only the US
As of 30 September 2026, Regology and RegWatch are the two options in this comparison that publish a price. Regology's pricing page lists a free Reggi assistant for individual US-law queries, a Professional plan at "$1,700 /user/month (with 3 year contract)" for US federal and state regulatory change management, and quote-based Enterprise pricing for global jurisdictions. Archived copies of the page show $1,250 per user per month through 16 December 2025 and $1,700 by 18 January 2026, so the price rose over the turn of the year and stayed there after the Bloomberg deal. The other six sell by quote or demo request: Archer's pricing page shows no figures, CUBE has no pricing page, Corlytics and Harvey return a 404 for /pricing, and Zango's pricing address redirects to a contact form.
Opacity is common in this category, and it compounds after acquisitions: as our TRRI migration guide covers, renewals happen on the acquirer's paper, with license terms open to renegotiation. RegWatch lists a starting price of $799 per month and quotes Enterprise; see pricing for what each plan includes. Two published starting prices do not fix a category, but they give you anchor numbers to put on the table when the quote-only vendors name theirs.
The verdict by segment: only existing Archer GRC customers should default to staying
Standalone Compliance.ai customers with no other Archer footprint: run the migration checklist now, decide at renewal. Compliance.ai's own site says your platform is now Archer Evolv Compliance, so continuity of your EITL-tuned filters is a contract question. Staying means buying into a GRC vendor's product cadence. That is a fine outcome if you want a suite, and a weaker fit if you bought Compliance.ai for focused monitoring alone. Either way, the checklist below protects you.
Existing Archer GRC customers: stay, and negotiate the regulatory intelligence layer into your renewal. If Archer already runs your risk and controls stack, Evolv Compliance is the path of least integration resistance, and you have room to negotiate: ask for the capabilities you rely on to be named in the order form, with the expert review service levels in writing.
Large financial groups that want rulebook depth at global scale: CUBE, or Wolters Kluwer for US bank compliance, eyes open. CUBE now holds the former Thomson Reuters Regulatory Intelligence, Oden, Reg-Room, Acin, Kodex AI and 4CRisk under Hg-backed ownership: a content library assembled through acquisitions and a fast-changing product line. Wolters Kluwer is the independent-ownership pick, a listed company that kept OneSumX for compliance when it sold its reporting unit to Regnology, with an RCM feed that states over 700 regulatory bodies and agencies globally and a Reg Manager product built for US community banks and credit unions. Ask both to show you a stored triage decision from last week, and note that neither publishes a price.
Teams that bought Compliance.ai for the library-plus-assistant model: Regology still works, on Bloomberg paper. The acquisition was announced on 3 June 2026 without financial terms. Four months on, the site trades as Bloomberg Regology, the published price is unchanged at $1,700 per user per month for US coverage, and Bloomberg's release describes integration into its portfolio without dates, so we will not speculate about sunsets in either direction. Get contract clarity from Bloomberg on assignment, data export and renewal terms before committing to the three-year term.
Legal teams that already pay for Harvey or Legora: start with the feature in your existing contract. Harvey Horizon Scanning (Early Access since 1 September 2026) and Legora Monitors (generally available since 2 June 2026) put regulatory alerts next to the research and drafting tools a legal team already uses. If a compliance function needs owners, deadlines and evidence, test that in the pilot: Legora's launch post describes assigning owners and tracking findings, owners and deadlines, and Harvey's describes updates that show "who it affects, what they need to do, and by when." Ask each how that becomes an owned obligation with evidence your auditor can follow.
Mid-market and multinational teams that need explainable triage, a published price or a private deployment: this is the segment RegWatch was built for, with the disclosure repeated: it is my company. RegWatch covers the watching and the loop; it sells neither a rulebook library nor editorial analysis. It monitors the Watchlists you configure on a daily to monthly schedule, keeps each finding's source URL, dates and verbatim excerpt, writes a "Why this matters" statement against your company profile, requires a reason to dismiss an item, and converts accepted alerts into obligations with an owner, a deadline and evidence: the obligations register layer a feed alone does not provide. Converting an alert, assigning an owner and dismissing an item are actions a human-in-the-loop reviewer takes, and each decision goes to a tamper-evident, append-only audit log. RegWatch delivers by email and exports to Excel and PDF, and as a young platform it should face the same parallel test as every other vendor here. Zango, which announced its seed round in July 2025, is the other early-stage option here; apply the same test to it.
Six migration steps make a vendor switch an auditable event
Treat migration off a monitoring tool as an auditable event: every step files something, so that a coverage gap during the switch can be explained.
| # | Step | Evidence to file |
|---|---|---|
| 1 | Export everything exportable now: document library, alert history, and the audit trail proving monitoring occurred in past periods. Do this regardless of your decision, because evidence continuity is cheap today and expensive later. | Export files and retention log |
| 2 | Inventory your EITL-tuned topic filters and taxonomies. Years of expert review tuning live in those configurations. Assume they do not port automatically; they are the part of Compliance.ai you will miss first. | Filter and taxonomy inventory |
| 3 | Map your contract: which paper you are on (legacy Compliance.ai or Archer), renewal date, notice period, auto-renew trigger, and change-of-control and data-export clauses. Calendar the notice date today; it is the only hard deadline in this story. | Contract and assignment correspondence |
| 4 | Run a 30-day parallel pilot: an identical watchlist on the incumbent and one challenger; count items caught, missed and duplicated per source, and time-to-alert. | Pilot scorecard |
| 5 | Re-validate source coverage per jurisdiction against your actual obligations footprint: your 12 jurisdictions, not the vendor's global count. | Coverage map |
| 6 | Re-baseline alert precision before cutover: require visible reasoning for every suppression. A suppression you cannot explain is a finding you cannot defend in an exam. | Triage precision baseline memo |
Export the archive now and let a parallel pilot decide before your notice date
Standalone Compliance.ai customers at mid-size financial firms should treat the site's own statement that "your platform is now Archer Evolv Compliance" as a starting gun. Export the archive this month. Inventory the EITL filter tuning this month, because that configuration is the asset nobody prices. Then run one parallel pilot, Archer Evolv against one challenger from a different owner, and let the scorecard, not the deck, make the call before the notice date.
Archer, Bloomberg Industry Group, CUBE and Corlytics have announced at least nine regtech acquisitions since February 2024, among them regulatory intelligence and change products such as Compliance.ai, Reg-Room, Thomson Reuters Regulatory Intelligence and Oden, 4CRisk and Regology. Every acquisition shifts renewal negotiating power toward the acquirer, and independent vendors and published prices are becoming scarce. Buy accordingly, date-stamp everything you rely on, and distrust any comparison page, including this one, that does not tell you when its facts were checked. Ours were checked on 30 September 2026 and rechecked on 1 October 2026. For our other vendor comparisons, go to the tools and comparisons hub.
This article is general information, not legal advice.
Questions
What happened to Compliance.ai?
Archer announced its acquisition of Compliance.ai on 20 February 2024. The company was not shut down: as of 30 September 2026 the site is live, calls itself part of Archer Evolv Compliance and tells existing users their platform is now Archer Evolv Compliance. The Regulatory Trends blog's newest post is dated 7 January 2025. The practical issue for standalone customers is roadmap and contract continuity, not disappearance.
Is Regology still an independent Compliance.ai alternative?
No. Bloomberg Industry Group announced its acquisition of Regology on 3 June 2026 and published no financial terms. As of 30 September 2026 the site trades as Bloomberg Regology and the Professional plan is still listed at $1,700 per user per month on a three-year contract for US coverage. The release describes integration into Bloomberg's portfolio without dates, so ask about assignment and data export before signing.
How much does regulatory intelligence software cost?
Two of the eight options publish a price. Regology lists a Professional plan at $1,700 per user per month on a three-year contract for US federal and state coverage, with global pricing on request. RegWatch lists a starting price of $799 per month and quotes Enterprise. Archer, CUBE, Corlytics, Wolters Kluwer, Zango and Harvey sell by quote or demo request, as of 30 September 2026.
What is the difference between regulatory intelligence and regulatory change management?
Regulatory intelligence is the watching: sourcing, monitoring and analyzing regulatory developments. Regulatory change management is the downstream workflow that converts each change into obligations with owners, deadlines and evidence. The handoff between the two is where programs stall: CUBE's Cost of Compliance 2025 survey, from a vendor in this comparison, found that 74% of firms take more than a year to implement new regulations.
Do compliance teams actually use AI for regulatory monitoring yet?
Use is now widespread, but monitoring is one use case among several. KPMG's July 2025 paper cites a Compliance Week survey in which 13% used AI to keep pace with regulatory changes. Compliance Week's June 2026 coverage of its latest survey says nearly all responding compliance professionals now use AI in day-to-day tasks, and CUBE's November 2025 survey found 98% of firms have adopted some automation.
Terms in this guide
Sources
- Archer: announces acquisition of Compliance.ai (20 February 2024, Business Wire copy of the release) accessed 30 Sep 2026
- Archer: acquires Flisk (20 March 2024) accessed 1 Oct 2026
- Archer: announces Assurance AI and next-generation risk experience (18 September 2024, Business Wire copy of the release) accessed 30 Sep 2026
- Archer: launches Evolv Foundation and Evolv Workplace (14 September 2026) accessed 30 Sep 2026
- Archer: Evolv Compliance page (live, last modified 24 September 2026) accessed 30 Sep 2026
- Archer: Evolv Compliance page (Internet Archive capture of 8 June 2026) accessed 30 Sep 2026
- Archer: home page (source count and deployment wording) accessed 30 Sep 2026
- Archer: pricing page accessed 30 Sep 2026
- Compliance.ai: home page (Archer-branded) accessed 30 Sep 2026
- Compliance.ai: Regulatory Trends blog accessed 30 Sep 2026
- Compliance.ai: available regulatory content (weekly reports and agency list) accessed 30 Sep 2026
- Compliance.ai: weekly agency report (13 July 2026) accessed 1 Oct 2026
- Cinven: agrees to acquire Archer (13 April 2023) accessed 30 Sep 2026
- Cinven: portfolio page for Archer accessed 30 Sep 2026
- Hg: CUBE and Hg unite (20 March 2024) accessed 30 Sep 2026
- Hg: CUBE acquires Reg-Room (8 May 2024) accessed 30 Sep 2026
- Hg: CUBE acquires the Thomson Reuters Regulatory Intelligence and Oden businesses (16 May 2024) accessed 30 Sep 2026
- CUBE: completes acquisition of Thomson Reuters Regulatory Intelligence and Oden (2 January 2025) accessed 30 Sep 2026
- CUBE: announces acquisition of Acin (19 June 2025) accessed 30 Sep 2026
- CUBE: acquires Kodex AI (16 October 2025) accessed 30 Sep 2026
- CUBE: acquires 4CRisk (19 February 2026) accessed 30 Sep 2026
- CUBE and Microsoft: RegPlatform on the Microsoft Marketplace (25 March 2026) accessed 30 Sep 2026
- CUBE: launches integration with ServiceNow (14 April 2026) accessed 1 Oct 2026
- CUBE and IBM: collaboration on Regulatory Horizon Scanning in watsonx.governance (16 September 2026) accessed 30 Sep 2026
- CUBE: Regulatory Inventory page (coverage claims) accessed 30 Sep 2026
- CUBE: Horizon Scanning page (review record wording) accessed 1 Oct 2026
- CUBE: The Cost of Compliance Report 2025 (4 November 2025) accessed 30 Sep 2026
- 4CRisk: products page accessed 30 Sep 2026
- Bloomberg Industry Group: acquires Regology (3 June 2026) accessed 30 Sep 2026
- Regology: pricing page accessed 30 Sep 2026
- Regology: pricing page (Internet Archive capture of 16 December 2025) accessed 30 Sep 2026
- Regology: pricing page (Internet Archive capture of 18 January 2026) accessed 30 Sep 2026
- Regology: home page accessed 30 Sep 2026
- Corlytics: Verdane investment (9 April 2024) accessed 30 Sep 2026
- Corlytics: acquires a Deloitte UK RegTech platform (7 May 2024) accessed 30 Sep 2026
- Corlytics: Corlytics and Clausematch come together (5 July 2023) accessed 30 Sep 2026
- Corlytics: acquires ING SparQ (25 January 2023) accessed 1 Oct 2026
- Corlytics: leadership announcement (27 May 2026) accessed 30 Sep 2026
- Corlytics: regulatory monitoring page accessed 30 Sep 2026
- Wolters Kluwer: OneSumX regulatory change management (RCM) accessed 30 Sep 2026
- Wolters Kluwer: OneSumX Reg Manager product page accessed 30 Sep 2026
- Wolters Kluwer: completes divestment of its Finance, Risk and Regulatory Reporting unit (1 December 2025) accessed 30 Sep 2026
- Zango: raises $4.8M (1 July 2025) accessed 30 Sep 2026
- Zango: horizon scanning product page accessed 30 Sep 2026
- Zango: FAQ accessed 30 Sep 2026
- Harvey: Introducing Horizon Scanning (1 September 2026) accessed 30 Sep 2026
- Harvey: Horizon Scanning product page accessed 30 Sep 2026
- Harvey: raises $550M at a $15.5B valuation (9 September 2026) accessed 30 Sep 2026
- Harvey: investment from Ontario Teachers' Pension Plan (24 September 2026) accessed 30 Sep 2026
- Legora: Introducing Monitors (2 June 2026) accessed 30 Sep 2026
- Ascent: acquired by Edgewater Equity Partners (18 January 2024) accessed 30 Sep 2026
- Ascent: acquires Waymark (8 February 2024) accessed 30 Sep 2026
- FinregE: strategic investment from Moody's Corporation (12 January 2026) accessed 30 Sep 2026
- Perwyn: acquires Vixio Regulatory Intelligence from Kester Capital (12 December 2022) accessed 30 Sep 2026
- Perwyn: Vixio investment page accessed 1 Oct 2026
- Vixio: home page accessed 30 Sep 2026
- LexisNexis: Regulatory Compliance (US page) accessed 30 Sep 2026
- LexisNexis: Regulatory Compliance (UK page) accessed 1 Oct 2026
- LexisNexis: Regulatory Compliance (Australia page) accessed 1 Oct 2026
- Optro (formerly AuditBoard): regulatory compliance product page accessed 30 Sep 2026
- Optro: AuditBoard is now Optro (9 March 2026) accessed 30 Sep 2026
- KPMG: How AI is poised to reshape compliance functions (July 2025) accessed 30 Sep 2026
- Compliance Week: For the first time, a majority of compliance teams using AI (27 May 2025) accessed 30 Sep 2026
- Compliance Week: Inside the Mind of the CCO survey finds most compliance teams allow AI use (10 June 2026) accessed 30 Sep 2026
