# Audit Rights Clause

Source: https://contracko.com/es/biblioteca-de-clausulas/derecho-de-auditoria

# Audit Rights Clause

Gives a party the right to inspect the other's records or systems to verify compliance.

## Qué es

An audit clause entitles one party to examine the other's books, records, processes or security controls to confirm compliance, for example with pricing, royalty reporting, licence usage, or data-protection obligations.

## Por qué importa

Trust is not verification. Audit rights let a customer or licensor check that reported figures and controls are accurate, deterring under-reporting and supporting regulatory accountability under the GDPR and similar regimes.

## Cómo aplicarla

- Define the scope, frequency, notice period and who may conduct the audit.
- Limit access to relevant records and protect the auditee's confidential information.
- Allocate costs: the auditor usually pays, unless a material discrepancy is found.
- State remedies: correction, repayment of underpaid amounts, and re-audit rights.

## Consejos de negociación

- • Auditees should cap audit frequency and require reasonable notice and confidentiality.
- • Auditors should secure a cost-shift if the audit reveals a discrepancy above a threshold.

## Errores frecuentes

- • Audit rights so intrusive they disrupt operations or expose unrelated confidential data.
- • No remedy attached, so an audit can find a breach but achieve nothing.

### Cómo ayuda Contracko

Contracko stores the audit-rights clause alongside every supplier and processor agreement, so compliance teams can quickly verify the notice period, permitted scope, and cost-allocation rule before commissioning an audit. AI analysis flags whether the clause meets GDPR Article 28 requirements for data processing agreements, removing the need to re-read each contract from scratch.

## Referencias legales

- [GDPR Art. 28(3)(h) GDPR: audits of processors Derecho de la UE](https://eur-lex.europa.eu/eli/reg/2016/679/oj)
- [BW 6:248 Reasonableness and fairness Derecho neerlandés](https://wetten.overheid.nl/BWBR0005289)

Salvo indicación en contrario, las referencias remiten al derecho neerlandés (Burgerlijk Wetboek, el Código Civil neerlandés); los instrumentos de la UE como el RGPD se aplican en toda la UE. Se trata de información general, no de asesoramiento legal. Otras jurisdicciones tratan estos conceptos de forma distinta. Verifique el texto vigente y su situación con un abogado cualificado.

## Relevante para

[Servicios informáticos](https://contracko.com/es/sectores/servicios-informaticos)[Servicios financieros](https://contracko.com/es/sectores/servicios-financieros)[Farmacéutica y biotecnología](https://contracko.com/es/sectores/farma-biotecnologia)[Proveedores de servicios gestionados](https://contracko.com/es/sectores/proveedores-servicios-gestionados)[Contabilidad y auditoría](https://contracko.com/es/sectores/contabilidad)

## Cláusulas relacionadas

- [Compliance Clause](https://contracko.com/es/biblioteca-de-clausulas/clausula-de-cumplimiento)
- [Data Processing Clause](https://contracko.com/es/biblioteca-de-clausulas/tratamiento-de-datos)
- [Benchmarking Clause](https://contracko.com/es/biblioteca-de-clausulas/clausula-de-benchmarking)
- [License Grant Clause](https://contracko.com/es/biblioteca-de-clausulas/concesion-de-licencia)

## Términos relacionados

- [GDPR](https://contracko.com/es/glosario/rgpd)
- [Data processing agreement (DPA)](https://contracko.com/es/glosario/acuerdo-de-tratamiento-de-datos)
- [Confidential information](https://contracko.com/es/glosario/informacion-confidencial)

### No vuelva a perder un plazo de contrato

- La IA encuentra las fechas de renovación y preaviso
- Los riesgos y obligaciones afloran automáticamente
- Los recordatorios le ayudan a actuar antes de que las fechas se escapen

Suelte un contrato para empezar

PDF, DOCX, PNG o JPG

[Empezar prueba de 7 días](https://app.contracko.com/register?appLanguage=es&utm_source=clause_library_sidebar&utm_medium=lead_magnet&utm_campaign=clause_library_sidebar_contract_upload&content_slug=audit&content_title=Audit+Rights+Clause&cta_placement=clause_library_sidebar_cta&source_tool=clause_library_sidebar_audit)

Conforme con el RGPD. Cifrado. Nunca se usa para entrenar la IA.

## Preguntas frecuentes

Preguntas comunes sobre esta cláusula.

- **Q:** Who pays for an audit?
  **A:** Usually the party requesting it, but contracts often shift the cost to the auditee if the audit uncovers a material breach or underpayment.

- **Q:** Are audit rights required under the GDPR?
  **A:** Yes. A data processing agreement must let the controller audit or inspect the processor's compliance under Article 28.

- **Q:** Can an audit right be satisfied by an independent third-party certificate?
  **A:** Often yes. Many processors offer ISO 27001 or SOC 2 reports as a substitute. The contract should state explicitly whether certification satisfies the audit right or whether an on-site audit remains possible.

- **Q:** How much notice must you give before conducting an audit?
  **A:** Contracts typically require 10 to 30 days' written notice. For fraud or security-incident investigations, a shorter or unannounced audit right should be negotiated separately.

- **Q:** What remedies follow a finding of material underpayment?
  **A:** The standard remedies are repayment of the shortfall with interest, a cost-shift for the audit, and sometimes a right to terminate for breach if the underpayment was systematic or intentional.

## No vuelva a perder nunca una cláusula de riesgo

Contracko revisa automáticamente cada contrato en busca de esta cláusula y de las obligaciones que genera.

[Iniciar la prueba gratuita de 7 días](https://app.contracko.com/register?appLanguage=es)

Reservar demo