# Audit Rights Clause

Source: https://contracko.com/pt/biblioteca-de-clausulas/direito-de-auditoria

# Audit Rights Clause

Gives a party the right to inspect the other's records or systems to verify compliance.

## O que é

An audit clause entitles one party to examine the other's books, records, processes or security controls to confirm compliance, for example with pricing, royalty reporting, licence usage, or data-protection obligations.

## Porque é importante

Trust is not verification. Audit rights let a customer or licensor check that reported figures and controls are accurate, deterring under-reporting and supporting regulatory accountability under the GDPR and similar regimes.

## Como aplicar

- Define the scope, frequency, notice period and who may conduct the audit.
- Limit access to relevant records and protect the auditee's confidential information.
- Allocate costs: the auditor usually pays, unless a material discrepancy is found.
- State remedies: correction, repayment of underpaid amounts, and re-audit rights.

## Dicas de negociação

- • Auditees should cap audit frequency and require reasonable notice and confidentiality.
- • Auditors should secure a cost-shift if the audit reveals a discrepancy above a threshold.

## Erros frequentes

- • Audit rights so intrusive they disrupt operations or expose unrelated confidential data.
- • No remedy attached, so an audit can find a breach but achieve nothing.

### Como o Contracko ajuda

Contracko stores the audit-rights clause alongside every supplier and processor agreement, so compliance teams can quickly verify the notice period, permitted scope, and cost-allocation rule before commissioning an audit. AI analysis flags whether the clause meets GDPR Article 28 requirements for data processing agreements, removing the need to re-read each contract from scratch.

## Referências jurídicas

- [GDPR Art. 28(3)(h) GDPR: audits of processors Direito da UE](https://eur-lex.europa.eu/eli/reg/2016/679/oj)
- [BW 6:248 Reasonableness and fairness Direito neerlandês](https://wetten.overheid.nl/BWBR0005289)

Salvo indicação em contrário, as referências remetem para o direito neerlandês (Burgerlijk Wetboek, o Código Civil neerlandês); os instrumentos da UE, como o RGPD, aplicam-se em toda a UE. Esta é informação geral, não constitui aconselhamento jurídico. Outras jurisdições tratam estes conceitos de forma diferente. Verifique o texto em vigor e a sua situação com um advogado qualificado.

## Relevante para

[Serviços de TI](https://contracko.com/pt/setores/servicos-informaticos)[Serviços Financeiros](https://contracko.com/pt/setores/servicos-financeiros)[Farmacêutica e Biotecnologia](https://contracko.com/pt/setores/farma-biotecnologia)[Prestadores de Serviços Geridos](https://contracko.com/pt/setores/fornecedores-servicos-geridos)[Contabilidade e Auditoria](https://contracko.com/pt/setores/contabilidade)

## Cláusulas relacionadas

- [Compliance Clause](https://contracko.com/pt/biblioteca-de-clausulas/clausula-de-conformidade)
- [Data Processing Clause](https://contracko.com/pt/biblioteca-de-clausulas/tratamento-de-dados)
- [Benchmarking Clause](https://contracko.com/pt/biblioteca-de-clausulas/clausula-de-benchmarking)
- [License Grant Clause](https://contracko.com/pt/biblioteca-de-clausulas/concessao-de-licenca)

## Termos relacionados

- [GDPR](https://contracko.com/pt/glossario/rgpd)
- [Data processing agreement (DPA)](https://contracko.com/pt/glossario/acordo-de-tratamento-de-dados)
- [Confidential information](https://contracko.com/pt/glossario/informacao-confidencial)

### Nunca mais perca um prazo contratual

- A IA encontra as datas de renovação e aviso prévio
- Os riscos e obrigações são apresentados automaticamente
- Os lembretes ajudam-no a agir antes que as datas passem

Largue um contrato para começar

PDF, DOCX, PNG ou JPG

[Iniciar avaliação de 7 dias](https://app.contracko.com/register?appLanguage=pt&utm_source=clause_library_sidebar&utm_medium=lead_magnet&utm_campaign=clause_library_sidebar_contract_upload&content_slug=audit&content_title=Audit+Rights+Clause&cta_placement=clause_library_sidebar_cta&source_tool=clause_library_sidebar_audit)

Conforme com o RGPD. Encriptado. Nunca utilizado para treinar IA.

## Perguntas frequentes

Questões comuns sobre esta cláusula.

- **Q:** Who pays for an audit?
  **A:** Usually the party requesting it, but contracts often shift the cost to the auditee if the audit uncovers a material breach or underpayment.

- **Q:** Are audit rights required under the GDPR?
  **A:** Yes. A data processing agreement must let the controller audit or inspect the processor's compliance under Article 28.

- **Q:** Can an audit right be satisfied by an independent third-party certificate?
  **A:** Often yes. Many processors offer ISO 27001 or SOC 2 reports as a substitute. The contract should state explicitly whether certification satisfies the audit right or whether an on-site audit remains possible.

- **Q:** How much notice must you give before conducting an audit?
  **A:** Contracts typically require 10 to 30 days' written notice. For fraud or security-incident investigations, a shorter or unannounced audit right should be negotiated separately.

- **Q:** What remedies follow a finding of material underpayment?
  **A:** The standard remedies are repayment of the shortfall with interest, a cost-shift for the audit, and sometimes a right to terminate for breach if the underpayment was systematic or intentional.

## Nunca mais perca uma cláusula arriscada

O Contracko revê automaticamente cada contrato em busca desta cláusula e das obrigações que cria.

[Iniciar período de experiência gratuito de 7 dias](https://app.contracko.com/register?appLanguage=pt)

Marcar demonstração