The DutchGrid medium-security Certification Authority will cooperate with a compliance audit at least once every year. Such an audit may be requested by authorities which which cross-certification relations exist, by CAs with which the DutchGrid medium-security Certification Authority has entered into a common policy management authority, by a policy management authority in which the DutchGrid medium-security Certification Authority has entered or by qualified relying parties. Any costs associated to such compliance audit are to be born by the requesting party.