Direct answer: A procurement contract audit-right/right-to-examine-books clause is not a line saying "the buyer has the right to audit". The page should state: audit scope (cost/price/BOM/labour/rates/subcontracting/quality/compliance/inventory/systems/ESG); audit method (on-site/remote/written/sampling/interviews); notice/frequency/period; access rights and data format; confidentiality/trade secrets/personal data/customer data; costs/personnel/independence; findings/remediation/follow-up/breach; survival after termination; dispute resolution. On the law: the Civil Code allows parties to agree contractual rights and obligations, requires full performance and good faith, and protects trade secrets learned during contracting/performance; the Anti-Unfair Competition Law protects trade secrets; the Civil Procedure Law sets the burden of proof and evidence preservation. This article is current to 2026-11-08 and is a summary of public rules and page method, not legal, audit or cost-review advice; contracts, NDAs, evidence and court/arbitration findings control.
This article is for procurement, finance, legal, internal-control, supply-chain and website teams at equipment, electronics, automotive-parts, medical-device, hardware, chemical, packaging and export manufacturers in Changzhou and nearby. It covers how to write and accept a procurement contract audit-right/right-to-examine-books page. The usual gap is "scope, notice, access, confidentiality, costs, remediation and survival", ending with a page that only says "right to audit", which suppliers reject, procurement dares not use and legal cannot enforce.
First fix the scope: cost, price, BOM, labour, subcontracting, quality, compliance or ESG — the more specific, the more enforceable. Then fix the boundaries: notice/frequency/access/data/confidentiality/personal data/customer data/costs/independence. Finally close the loop: findings, management response, remediation, follow-up, breach, survival after termination. The page states scope, boundaries, process and remedies — not "right to audit".
How does this page relate to internal audit, supplier second-party audit, VA/VE, quality claims, bankruptcy response, contract signing and procurement-records pages?
A contract audit-right page answers "on what basis the buyer audits, what it audits, how, and what happens with findings"; the procurement internal-audit page answers "how internal audit independently reviews procurement"; the supplier second-party audit page answers "quality/system/process audits"; the VA/VE page answers "cost breakdown/cost reduction"; the quality-claim page answers "claims/deduction/set-off"; the bankruptcy response page answers "claims/retrieval after acceptance"; the contract signing page answers "document priority/signature"; the procurement records page answers "how long to keep evidence". A contract audit right is a "contractual right" and cannot be replaced by internal audit or second-party audit.
Common breaks: only "right to audit"; scope too broad/narrow; no notice/frequency; no data format; no NDA; auditing supplier customer data/personal data; unclear who bears costs; auditor not independent; no remediation/follow-up; no remedy if the supplier refuses; clause expires on termination; the website publishes audit reports/costs. The page separates "scope—method—notice—access—confidentiality—costs—findings—remediation—termination—dispute" so procurement/finance/legal/internal control share one vocabulary.
| Page | Question it answers | Key content | Cannot replace |
|---|---|---|---|
| Contract audit right/right to examine books | On what basis/what/how/what happens with findings | Scope, method, notice, access, confidentiality, costs, remediation, survival | Internal/second-party audit |
| Procurement internal audit | How internal audit independently reviews procurement | Plan, sampling, evidence, findings, remediation | Contractual right over supplier |
| Supplier second-party audit | Quality/system/process audit | Standard, site, nonconformity, CAPA | Cost/financial audit |
| VA/VE | Cost breakdown/cost reduction | Function, cost, option, validation | Audit right/evidence |
| Quality claim | Claims/deduction/set-off | Trigger, amount, evidence | Cost audit |
| Bankruptcy response | Claims/retrieval after acceptance | Declaration, retrieval, set-off, priority | Routine audit right |
| Contract signing | Document priority/signature | Contract, technical agreement, seals | Audit execution |
| Procurement records | How long to keep evidence | Contract, records, retention | Audit scope |
Page relationships are editorial; contracts, NDAs, evidence and court/arbitration findings control.
What can and cannot be audited?
Common scope: (1) price/cost (quotes, cost breakdown, BOM, material/labour/rates, subcontracting, mould/tooling amortisation); (2) quality/delivery (inspection records, batches, nonconforming goods, rework, delivery performance); (3) compliance (labour, environment, safety, anti-bribery, export control, conflict minerals/forced labour, per contract/customer requirements); (4) inventory/assets (consignment, customer material, moulds/tooling, equipment); (5) systems/data (ERP/MES exports, access, logs); (6) subcontracting/upstream (second-tier suppliers, outsourcing, related parties); (7) ESG/carbon data (per customer/regulatory requirements). It cannot be unlimited: personal data unrelated to the contract, other customers' data, core formulas/processes (can be redacted/on-site only), export-controlled/security-restricted data should be excluded or handled in a controlled way.
Acceptance checks: scope list; cost/quality/compliance/inventory/systems/subcontracting/ESG; exclusions; redaction; on-site/remote; samples; frequency. Common gaps: only "financial records"; scope too broad; no personal-data exclusion; no protection of other customers' data; no redaction.
| Scope | What can be reviewed/notes | Evidence | Common gap |
|---|---|---|---|
| Price/cost | Quotes/cost breakdown/BOM/labour/rates/subcontracting/amortisation | Quotes/cost sheet | Only "price" |
| Quality/delivery | Inspection/batches/nonconforming/rework/OTIF | Records/system | No quality |
| Compliance | Labour/environment/safety/anti-bribery/export control/ESG | Certificates/records | Too narrow |
| Inventory/assets | Consignment/customer material/moulds/tooling/equipment | Inventory/photos | No inventory |
| Systems/data | ERP/MES exports/access/logs | Exports/logs | Paper only |
| Subcontracting/upstream | Second-tier/outsourcing/related parties | List/contracts | No flow-down |
| Exclusions/redaction | Personal data/other customers/core formulas | NDA/redaction | Unlimited |
Scope is editorial; contract purpose, necessity, confidentiality and applicable law control.
How should the clause be written to be enforceable?
At least: audit-right holder (buyer/designated third party, with NDA); scope; period (contract term + X years after termination, covering warranty/claims/audit trail); notice (how many business days/urgent cases); frequency (annual/trigger events); method (on-site/remote/written/sampling/interviews); access (premises/systems/personnel/records); data format/language/deadline; confidentiality/trade secrets/personal data/customer data/export control; costs (who bears/travel/third party); personnel/independence/conflict of interest; findings/management response/remediation/follow-up/closure; remedy for non-cooperation/false information/material findings (payment suspension/claim/termination); survival; dispute resolution. The clause should answer "who, when, what, how, and what happens".
Acceptance checks: holder; scope; period; notice; frequency; method; access; data; confidentiality; costs; independence; remediation; remedy; termination; dispute. Common gaps: unclear holder; no period; no notice; no data format; no confidentiality; unclear costs; no remediation; no remedy.
| Clause | What to write | Evidence | Common gap |
|---|---|---|---|
| Holder | Buyer/designated third party/NDA | Contract/NDA | Unclear |
| Scope | Cost/quality/compliance/inventory/systems/subcontracting | Annex/list | Too broad/narrow |
| Period | Contract term + X years after termination | Clause | Expires on termination |
| Notice/frequency | Business days/annual/trigger | Clause | Surprise audits |
| Method/access | On-site/remote/sampling/interviews/systems | Clause | Written only |
| Data | Format/language/deadline | Template | No format |
| Confidentiality | Trade secrets/personal data/customer data | NDA | None |
| Costs | Who bears/travel/third party | Clause | Unclear |
| Remediation/remedy | Response/remediation/follow-up/suspension/termination | Process | No remedy |
| Survival/dispute | Survival/dispute resolution | Clause | No survival |
The clause list is editorial and is not a contract template or legal advice; legal/finance/procurement review before signing.
How should supplier trade secrets, personal data and customer data be protected?
An audit right is not "look at everything". Do: NDA/confidentiality (scope/term/exceptions/breach); need-to-know (minimum personnel); clean team/on-site read-only; redaction/aggregation (cost by part/process, not other customers' prices/formulas); personal data minimisation/notice/access; customer data/export control/security review; access logs; return/destruction of materials; subcontractor flow-down; independent third-party auditor/conflict check/confidentiality. Suppliers may require: advance notice, scope limitation, competitor-auditor exclusion, on-site escort, redaction and cost compensation. The clause should balance "auditability" and "trade-secret protection", otherwise the supplier refuses to sign or execution is distorted.
Acceptance checks: NDA; need-to-know; clean team; redaction; personal data; customer data; export control; logs; return/destruction; flow-down; third party; conflict check. Common gaps: no NDA; full copy; exposing other customers; no redaction; no logs; no destruction.
| Protection | What to do | Evidence | Common gap |
|---|---|---|---|
| NDA | Scope/term/exceptions/breach | NDA | None |
| Need-to-know | Minimum personnel/access | List/access | Everyone can see |
| Clean team | On-site read-only/no removal | Rules/records | Full copy |
| Redaction/aggregation | Part/process/range | Template | Other customers exposed |
| Personal data | Minimisation/notice/access | Records | Over-collection |
| Customer data | Authorisation/isolation/no disclosure | Agreement | Mixed use |
| Export control/security | Restriction/approval | List | No review |
| Logs/return | Access logs/return/destruction | Logs/receipts | No destruction |
| Third party/conflict | Independent/no conflict/confidentiality | Declaration | Competitor auditor |
Confidentiality/data protection is editorial; NDAs, PIPL, Data Security Law, export control and contracts control.
How should open-book/cost audits be accepted?
Open book does not mean giving the buyer all accounts; it means providing cost components/evidence within the agreed scope: materials (part number/usage/loss/price source), labour (standard/actual/rate), manufacturing overhead (allocation basis/rate), subcontracting, mould/tooling amortisation, logistics/packaging, management/profit, tax/FX. It suits long-term agreements, custom parts, cost-plus, VA/VE and price-increase reviews; it does not suit every category. Acceptance: cost model; part number/BOM version; material price source; labour/rate; allocation; subcontracting; amortisation; profit/tax; FX; version/date; consistency with quotes/invoices/actuals; variance explanation. Do not treat "open book" as "unlimited audit", and do not accept a single total cost.
Acceptance checks: model; BOM; price source; labour; rates; allocation; subcontracting; amortisation; profit/tax; FX; version; reconciliation; variance. Common gaps: total price only; incomplete BOM; no price source; arbitrary allocation; outdated version; no variance explanation.
| Cost item | What to review | Evidence | Common gap |
|---|---|---|---|
| Materials | Part number/usage/loss/price source | BOM/invoice/index | No source |
| Labour | Standard/actual/rate | Process/wages | Arbitrary |
| Overhead | Allocation basis/rate | Allocation sheet | Unclear allocation |
| Subcontracting | Process/price/quality | Contract/invoice | No flow-down |
| Mould/tooling | Amount/amortisation/life | Contract/ledger | Double amortisation |
| Logistics/packaging | Route/packaging/rate | Quote/documents | Missing |
| Management/profit | Ratio/base | Contract/statement | Opaque |
| Tax/FX | Rate/FX/basis | Contract/quote | Mixed basis |
| Version/reconciliation | Version/date/variance | Model/reconciliation | Outdated |
Open book is editorial; contracts, cost models, quotes and finance basis control.
How should audit execution and remediation be accepted?
Execution: annual/trigger audit plan → notice/scope confirmation → NDA/access → kickoff → data request list → sampling/interviews/site → working papers → finding grading (material/general/observation) → management response → remediation plan/owner/deadline → follow-up/closure → report/archive. Sampling should state population/sample/method/coverage; findings need evidence/impact/root cause/recommendation; management response should state accept/reject/alternative; remediation should be verifiable (document/system/site); material findings should escalate (payment suspension/claim/termination/legal). An audit is not "finding fault"; it should improve cost/quality/compliance while protecting supplier trade secrets.
Acceptance checks: plan; notice; NDA; kickoff; data list; sampling; interviews; working papers; grading; response; remediation; follow-up; closure; report; escalation. Common gaps: no plan; surprise audit; no working papers; findings without evidence; no response; no deadline; no follow-up; no escalation.
| Step | What to do | Evidence | Common gap |
|---|---|---|---|
| Plan | Annual/trigger/scope/resources | Plan | No plan |
| Notice/kickoff | Advance notice/scope/contact | Email/minutes | Surprise |
| NDA/access | Confidentiality/access/least privilege | NDA/access | No NDA |
| Data/sampling | List/population/sample/method | List/working papers | Random sample |
| Interviews/site | People/premises/records | Minutes/photos | No records |
| Working papers/findings | Evidence/impact/root cause/grading | Working papers | No evidence |
| Response/remediation | Accept/alternative/owner/deadline | Response/plan | No deadline |
| Follow-up/closure | Verify/close/report | Follow-up/report | No follow-up |
| Escalation | Suspension/claim/termination/legal | Approval | No escalation |
Execution/remediation is editorial; contracts, audit policy and company process control.
How should costs, independence and survival after termination be accepted?
Costs: who bears (buyer-initiated routine audit usually buyer; supplier-caused re-audit/remediation/third-party testing can be supplier; third party/travel/sample testing per contract); budget/approval; cost control. Independence: internal audit/finance/procurement segregation; third-party auditor no conflict/no competitor conflict/NDA; auditors should not make decisions for the audited business. Survival: audit right/confidentiality/return of materials/unsettled claims/warranty/audit trail should normally survive X years after termination; termination should not affect audits/claims/payment disputes already incurred; dispute resolution survives. Without a survival clause, the supplier may refuse warranty/claim evidence after termination.
Acceptance checks: cost bearing; budget; third party; travel; independence; conflict; segregation; survival; return; dispute. Common gaps: unclear costs; third party without NDA; auditor conflict; clause expires on termination; materials not returned.
| Item | What to write | Evidence | Common gap |
|---|---|---|---|
| Cost bearing | Buyer/supplier/shared | Contract | Unclear |
| Third party/travel | Budget/approval/standard | Quote/approval | Uncontrolled |
| Independence | No conflict/no decision-making | Declaration | Self-audit |
| Third-party NDA | NDA/access | NDA | None |
| Segregation | Procurement/finance/internal audit | Authority | One person does all |
| Survival | Audit/confidentiality/claims/warranty X years | Clause | Expires on termination |
| Return | Return/destruction/receipt | Receipt | Not returned |
| Dispute | Negotiation/litigation/arbitration | Clause | No route |
Costs/independence is editorial; contracts, auditing standards, company policy and law control.
How should the website page be written, and what must not be published?
Suggested sections: (1) scope/purpose of the audit right; (2) method/notice/frequency/period; (3) access/data/sampling; (4) confidentiality/trade secrets/personal data/customer data; (5) costs/independence; (6) findings/remediation/follow-up/remedy; (7) survival/dispute; (8) contact/version/update date. The public page explains "principles, scope, process and boundaries", and does not publish specific supplier names/contracts/costs/audit reports/findings/prices/discounts, customer lists, personal data or pending disputes; specific audits are conducted under NDA/controlled systems/on-site.
The English page should use consistent terms (audit right, right to examine books/records, scope, notice, access, sampling, confidentiality, trade secret, personal data, independence, findings, remediation, survival, dispute resolution) and state the cut-off date. It can link to internal audit, second-party audit, VA/VE, quality claims, bankruptcy response, contract signing and procurement-records pages, but must not become a "check the supplier's books" advertisement.
| Section | What to write | Evidence | Avoid |
|---|---|---|---|
| Scope/purpose | Cost/quality/compliance/inventory/systems | Annex/list | Only "audit" |
| Method/notice | On-site/remote/sampling/frequency | Clause | Surprise |
| Access/data | Systems/records/format/deadline | Template | No format |
| Confidentiality | NDA/redaction/personal data | NDA | Full copy |
| Costs/independence | Bearing/third party/conflict | Contract/declaration | Self-audit |
| Remediation/remedy | Response/remediation/follow-up/suspension/termination | Process | No remedy |
| Survival/dispute | Survival/dispute resolution | Clause | Expires on termination |
| Public boundary | No costs/reports/suppliers | Access control | Publish all |
The page structure is editorial; public statements must be true and verifiable, and contracts, NDAs and law control.
Go-live acceptance checklist
Ten checks: scope/purpose; method/notice/frequency; access/data; confidentiality/personal data/customer data; costs/independence; findings/remediation/follow-up; remedy/breach; survival after termination; public boundary; version/owner. Each needs evidence and a review date. The pass standard is not "the page says there is a right to audit", but that procurement/finance/legal can launch an audit with scope, notice, confidentiality, working papers and remediation, and the supplier knows what to provide and how its trade secrets are protected.
Before go-live, run a tabletop exercise with a real (redacted) category: scope → notice → NDA → data list → sampling → interviews/site → working papers → findings → response → remediation → follow-up → closure. Then simulate a supplier refusal, a trade-secret dispute and a post-termination claim to see whether the page and clause work.
| Check | Pass standard | Evidence | If failed |
|---|---|---|---|
| Scope/purpose | Cost/quality/compliance/inventory/systems | Annex/list | Add scope |
| Method/notice | On-site/remote/sampling/frequency | Clause | Amend clause |
| Access/data | Systems/records/format/deadline | Template | Add template |
| Confidentiality | NDA/redaction/personal data/customer | NDA | Add NDA |
| Costs/independence | Bearing/third party/conflict | Contract/declaration | Adjust |
| Remediation/follow-up | Response/remediation/deadline/verification | Process | Add process |
| Remedy/breach | Suspension/claim/termination | Clause | Add remedy |
| Survival | Audit/confidentiality/claims/warranty | Clause | Add survival |
| Public boundary | No costs/reports/suppliers | Access control | Take down |
| Version/owner | Update date/owner | Page | Add owner |
The acceptance list is editorial; contracts, NDAs, auditing standards and company policy control.
Who should read it, who should not, and what decisions does it support?
For procurement, finance, legal, internal-control, supply-chain and website teams at equipment, electronics, automotive-parts, medical-device, hardware, chemical, packaging and export manufacturers in Changzhou and nearby; also for companies building an audit-right/right-to-examine-books page, being asked by customers to open costs, or facing "supplier refuses audit, trade-secret dispute, opaque costs, no remediation closure". Not for teams that do not involve supplier cost/compliance audits, or that want one page to replace legal/audit/cost-review advice.
Read it if: building an audit-right page; only writing "right to audit"; unclear scope; no notice; no data format; no NDA; unclear costs; no remediation; no remedy; clause expires on termination; publishing costs/reports. Not suitable if: treating the audit right as "unlimited access"; treating "open book" as "full copy"; treating "audit" as "finding fault"; treating "supplier refusal" as "no option". Supports: scope/purpose, method/notice, access/data, confidentiality/personal data, costs/independence, remediation/remedy, survival and page wording self-checks.
FAQ
Can a procurement contract provide an audit right/right to examine books?
Yes. A lawfully formed contract is protected by law, and the parties may agree on audit scope, method, notice, access, confidentiality, costs, remediation and remedies; the clause should be specific and enforceable and balance the supplier's trade-secret protection. It may not violate mandatory law, infringe personal data/third-party trade secrets or exceed what is necessary; legal review is required.
What can be audited?
Commonly price/cost (quotes, BOM, material/labour/rates, subcontracting, mould/tooling amortisation), quality/delivery, compliance (labour/environment/safety/anti-bribery/export control/ESG), inventory/assets, systems/data, and subcontracting/upstream. Personal data unrelated to the contract, other customers' data, core formulas/processes (can be redacted/on-site only), export-controlled/security-restricted data should be excluded or handled in a controlled way.
What about the supplier's trade secrets?
Sign an NDA/confidentiality clause (scope/term/exceptions/breach); need-to-know/minimum personnel; clean team/on-site read-only; redaction/aggregation (by part/process/range, not other customers' prices/formulas); personal-data minimisation; customer data/export control/security review; access logs; return/destruction; subcontractor flow-down; independent third-party auditor/no conflict/confidentiality. Suppliers may require advance notice, scope limitation, competitor-auditor exclusion, on-site escort, redaction and cost compensation.
Who bears the audit cost?
Per the contract. A buyer-initiated routine audit is usually borne by the buyer; a supplier-caused re-audit/remediation/third-party testing may be allocated to the supplier; third-party auditor/travel/sample testing per contract/budget. State the cost scope, standard, approval and dispute handling to avoid "free audit, expensive remediation".
What if the supplier refuses an audit?
First check whether the contract has clear audit/access/data/remedy clauses; if so, follow the breach/payment suspension/claim/termination provisions and preserve written notice/refusal evidence; without a clause, only negotiate/a supplementary agreement, and do not force entry or seize materials. Where trade secrets/personal data/export control are involved, first discuss a controlled audit (NDA/redaction/on-site/third party), and if necessary use litigation/arbitration evidence procedures.
Should the website publish audit clauses, supplier costs and audit reports?
Usually not specific supplier names/contracts/costs/prices/discounts, audit reports/findings, customer lists, personal data or pending disputes. The public page can explain the purpose, scope, method, confidentiality, remediation and contact window; specific audits are conducted under NDA/controlled systems/on-site.
One-sentence takeaway
The procurement contract audit-right/right-to-examine-books page on a Changzhou manufacturer's website is not about "right to audit"; it is about turning scope/purpose, method/notice/frequency, access/data, confidentiality/personal data/customer data, costs/independence, findings/remediation/follow-up, remedy/breach, survival after termination and public boundaries into a checkable list, so procurement/finance/legal can launch an audit with scope, notice, confidentiality, working papers and remediation, and the supplier knows what to provide and how its trade secrets are protected.
Research method and limitations
This article is a summary of public rules and page method, not legal, audit or cost-review advice. It uses no unpublished supplier, cost, price, audit report, finding, customer or contract data; the tables and acceptance items are editorial and not legal conclusions. The Civil Code, Anti-Unfair Competition Law and Civil Procedure Law; contracts, NDAs, evidence, auditing standards and court/arbitration findings control. This article does not decide whether any specific audit-right clause/audit finding/cost conclusion is valid; companies should review item by item and consult professional lawyers/auditors.
Sources and basis
Current to 2026-11-08; the official pages below control.
- Civil Code of the People's Republic of China: Supreme People's Court. Contract binding force, full performance/good faith, trade-secret protection and breach liability.
- Anti-Unfair Competition Law of the People's Republic of China (2019 amendment): NPC. Definition of trade secrets and infringement.
- Civil Procedure Law of the People's Republic of China (2023 amendment, effective 1 January 2024): National Laws and Regulations Database. Burden of proof, evidence preservation and evidence review.