vpn compliance