AI data access auditability requirements for business