Probably oversimplifying, but I get the feeling that Red Hat's compliance-enabled versions are for enterprise companies who need Linux, and Canonical's compliance-enabled versions are for smaller tech companies (or once-smaller ones) who need compliance.