Regulatory guidelines if not followed by algo service providers

There are algo service providers who sell algo for a subscription (Cloud based or portal based) . Regarding regulatory concerns here, who will the onus fall upon if algo company is not following regulatory guidelines. And what are the consequences on user/retail trader in such cases?

I guess both the service provider and the trader can face scrutiny if the algo breaks any rules.