No on-demand audit rights
Supervisory guidelines expect you to verify — and audit — how an outsourced provider handles your data. With hyperscalers, audit rights typically require complex bilateral negotiation and are rarely granted on standard terms.