compliance considerations for small teams