Unlike mature corporations, startups rarely have the luxury of dedicated compliance teams or even formal audit committees