I'm pretty sure it's just an honor system similar to a lot of similar software. Corporations tend to self-comply because they don't want to risk failed audits

I'm pretty sure it's just an honor system similar to a lot of similar software. Corporations tend to self-comply because they don't want to risk failed audits and lawsuits.