Vendor red flags for compliance audit: hourly billing with no cap, accounts registered to them, no post-launch support, and vague timelines. Compliance Audit avoids all four by design.