Design a Flexible Compliance Policy