Thanks, now I see. No, that's not how it works. If a legislation designates you as responsible, you can outsource compliance implementation, but not the responsibility itself. Banks can hire external companies to verify operations wrt embargoes, but if relevant authority found a violation, the most probable outcome will be penalty againt bank, not contractor. Moreover, at any time a bank may be ordered to demonstrate that they organized the whole process in such a way that they have substantial reasons to believe it works as required according to the current best practices (whatever it means), and be fined if they don't. Laws are quite often stupid, but placing blame is a honed process, and when the letters say they will kick your balls if anything, it's not easy to avoid this. Possibly we even will see publishers overrecation (as it observed in banking where clients or operations often blocked for no strong reason) and human content will be marked as LLM-produced, or "possibly LLM-produced" if they are given such option. Your concern about disadvantage to smaller players is not without reason as legally complicated environments often have such effect, but to be sure one needs to study the whole thing deeper. E.g. there could be exceptions for individuals/small companies.