Compliance Workflows: Checks, Evidence and Automation