API-driven regulatory compliance systems