Consists of analyzing an application made by a company to check for possible indicators of non-compliance risks.