We're considering implementing a new cryptographic system, but we are concerned with how it fits in with legal and regulatory compliance. Can you advise?