DORA · audit rights
The audit right has to be in the contract. How it is used is open to negotiation.
Agree how far ahead an audit or inspection has to be announced.
A routine cycle, and what counts as a trigger for an extra one.
Several customers send one auditor instead of each sending their own.
Your certificate or test results, where they already answer the question.