Compliance by Design