Generative AI can help with regulatory tasks, but once it enters compliance workflows, organizations have to protect confidentiality, auditability, and human review as carefully as the documents themselves.