license compliance risk