Who’s to blame when the AI tool managing a company’s compliance status gets it wrong?