Seen it play out at a company with over 40k employees so I figure its common everywhere to operate like this with these legal fig leafs.

The company I work for (under 10,000 employees) hires an outside company to conduct audits for this every two years. I have no idea how it works.