Compliance and risk is a software niche being successfully tapped