Evidence-Driven Compliance Mapping