1. One or more non-transitory computer-readable storage media storing computer-executable instructions for causing a computing system to perform processing to analyze whether a software program may create a compliance issue, the processing comprising: automatically determining, with a compliance tool specified by the computer-executable instructions, identifiers for each of a plurality of processes invoked by a software program by analyzing source code for the software program; comparing the identifiers of the plurality of invoked processes with a process compliance library, the process compliance library comprising an identifier of at least one process; determining that an invoked process results in a potential compliance violation; from the source code, determining at least one data source accessed by the invoked process resulting in a potential compliance violation; comparing the at least one data source with a data source compliance library, the data source compliance library comprising an identifier of the at least one data source; from the source code, determining at least one location to which data from the at least one data source may be transmitted as a result of invoking the process resulting in a potential compliance violation; determining that the at least one data source is associated with a compliance warning; and outputting to a user a display of compliance results, the compliance results comprising a process of the plurality of processes, the process associated with the compliance warning, the display indicating the at least one data source accessed by the invoked process resulting in a potential compliance violation and the at least one location to which data from the at least one data source may be transmitted as a result of invoking the process resulting in a potential compliance violation.