Map SOC 2, GDPR, and HIPAA onto the three layers of an AI employee — runtime, memory, and audit — and see exactly which framework forces which control. For architects who want compliance by design, not bolted on.