Buying an off-the-shelf compliance program is inadvisable for a multitude of reasons. Most fundamentally, however, these programs simply don't work. A compliance program must be tailored to a company's or practice's specific operations and risks, and a generic off-the-shelf program will almost certainly leave many gaping holes left to be filled.