Don’t assume partners are compliant; ask for proof.