What are the risks of non-compliance for non-STPI?