AI-driven identity must exist in a robust compliance framework