The Audit And Inspection Clause: What It Means and How to Negotiate It (2026)

What is an audit and inspection clause? An audit and inspection clause gives one party the right to examine the other party's records, premises, systems or work, to check that the contract is being performed properly. It lets a buyer verify that charges are correct, that quality and service levels are met, that data is handled safely, and that the supplier is following the law and the contract. The clause sets who can audit, how often, with what notice, at whose cost, and what happens when a problem is found. It matters because a contract is only as good as your ability to check it is being honoured. Without an audit right, the party relying on performance has to take the other side's word for billing, quality and compliance. With one, it can verify, which both deters problems and catches them early. This article is general guidance, not legal advice. Audit rights interact with confidentiality, data-protection and sector regulation that vary by jurisdiction, so have a qualified professional adapt any clause to your deal. ## What a good audit and inspection clause covers - Scope: which records, systems, sites and processes can be examined, and for what purpose (charges, quality, data, compliance).

• Who audits: the party itself, its independent auditors, and sometimes its regulators.
• Frequency and notice: how often, and how much warning, with a carve-out for suspected fraud or a regulator's demand.
• Cost: who pays, and a shift of cost to the supplier if a material discrepancy is found.
• Records retention: how long the supplier must keep the records that can be audited.
• Subcontractors: audit rights that reach down the chain.
• Consequences: correction, repayment of overcharges, and remedies for failure. ## Sample audit and inspection clause wording Adapt the brackets to your deal and governing law. ``` AUDIT AND INSPECTION 1. The Supplier shall keep complete and accurate records relating to the Services and the Charges for [N] years after the relevant period. 2. On [N] days written notice, and no more than [once] per year (or at any time where fraud or a material breach is suspected, or a regulator so requires), the Customer, its auditors or its regulators may inspect and audit those records, and the premises and systems used to provide the Services, during normal business hours. 3. Audits shall be conducted so as to minimise disruption, and the auditing party shall comply with the Supplier's reasonable security and confidentiality requirements. 4. Each party bears its own audit costs, except that if an audit reveals an overcharge of more than [X]%, the Supplier shall bear the audit cost and repay the overcharge with [interest]. 5. The Supplier shall procure equivalent audit rights over its subcontractors used to provide the Services.

- **Scope, frequency and notice (clause 2).** Balance the buyer's need to verify against the supplier's need not to be disrupted. A once-a-year routine audit with reasonable notice is common, with an exception for suspected fraud or a regulator's demand where notice is short or none.
- **Conduct and confidentiality (clause 3).** Audits touch sensitive data, so set reasonable security rules and protect the supplier's and any third party's confidential information.
- **Cost shifting (clause 4).** The useful lever is that the supplier pays for the audit, and repays the difference, if a material overcharge is found. This funds the audit from the problem it uncovers.
- **Subcontractors (clause 5).** Where the real work or data sits with subcontractors, the audit right has to reach them too. ## Negotiation points **If you are the party seeking the audit right (often the buyer):** - Make the scope wide enough to cover charges, service levels, data handling and compliance.
- Add a fraud and regulator carve-out that bypasses the notice and frequency limits.
- Include cost-shifting on a material overcharge and the right to repayment with interest.
- Require audit rights to flow down to subcontractors. **If you are the party being audited (often the supplier):** - Cap routine audits to once a year with reasonable notice, and during business hours.
- Protect confidential information, third-party data and other customers' data from exposure.
- Ask that the auditing party pay its own costs unless a material discrepancy is found.
- Limit the scope to records relevant to this contract, not your whole business. ## Common mistakes to avoid - No records-retention period, so the records are destroyed before you can audit them.
- Unlimited, no-notice audits that disrupt the supplier and sour the relationship.
- No fraud or regulator carve-out, so you cannot move fast when it matters most.
- No cost-shifting, so you pay to uncover the other side's overcharging.
- Ignoring confidentiality and data-protection limits, exposing third-party or personal data during an audit.
- No flow-down, leaving the real records with un-auditable subcontractors. ## A note on jurisdiction An audit and inspection clause is mostly a matter of good drafting, but it runs into rules that vary by jurisdiction. Data-protection law constrains what an audit can access and how personal data is handled during it; for example, EU and UK data-protection law requires processors to allow and contribute to audits by controllers, which is often reflected in a separate data-processing clause that has to align with this one. Regulated sectors add mandatory audit rights: financial-services outsourcing rules in many countries require that the firm and its regulator retain access and audit rights over outsourced providers, so a clause there must meet the regulator's minimum. Confidentiality and other customers' data limit how far an auditor can look. Because these constraints differ by country and sector, confirm the data-protection and regulatory requirements that apply before finalising the clause. Last verified October 2026. ## Where a contract workspace helps Writing one audit clause is simple. The harder task is making sure every supplier contract carries an audit right with the retention period, fraud carve-out and cost-shifting you need, keeping it aligned with the separate data-processing clause so the two do not clash, and remembering the retention windows so records still exist when you need to audit them. Drafting audit rights, reviewing how they sit alongside the data-protection clause, and tracking the records-retention windows can all live in one AI workspace tuned to how your company contracts, so records still exist when you come to audit them. [Adira](https://adiralaw.com) is one such workspace for audit and inspection terms across your supplier agreements. The clause above is enough to secure a fair audit right on its own.