Compliance risks in cloud migration