Every year, somewhere around Q3, the same email goes out. Subject line: "Audit Prep, Action Required." People who haven't looked at a compliance document since November suddenly care very much about compliance documents. Spreadsheets get updated. Policies get dusted off. Signatures get collected. And then the auditors leave. And everything go