Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The agreement grants PlanetScale the right to conduct or commission audits of customer and end user physical facilities, computers, and records during normal business hours to verify compliance with the agreement and acceptable use policy, with customers obligated to cooperate.
This analysis describes what PlanetScale's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes physical and records-based audits of customer infrastructure, which may extend to sensitive business systems and data beyond the scope of PlanetScale's database service. The scope of 'facilities, computers and records' is broad and the agreement does not specify prior notice requirements, audit frequency limits, or confidentiality obligations applicable to the auditing firm.
Interpretive note: The agreement does not specify advance notice requirements, audit frequency limits, or confidentiality obligations applicable to designated auditing firms, leaving the practical scope of this right ambiguous.
Under this clause, customers agree to permit PlanetScale or a designated independent accounting firm to audit their physical facilities, computer systems, and records during business hours. The agreement requires reasonable cooperation with such audits but does not define limits on audit scope, frequency, or advance notice requirements.
Cross-platform context
See how other platforms handle Audit Rights Over Customer Facilities and Records and similar clauses.
Compare across platforms →Monitoring
PlanetScale has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"PlanetScale shall have the right to conduct and/or direct an independent accounting firm to conduct, during normal business hours, an audit of Customer's and/or End User's facilities, computers and records to confirm Customer's and/or End user's use of Product is in compliance with this Agreement and AUP. Customer and End Users shall provide reasonable cooperation with any such audit.Excerpt from PlanetScale's Terms of Service
(1) REGULATORY LANDSCAPE: Physical and systems audit rights of this scope may interact with customer-side data protection obligations under GDPR, CCPA, HIPAA, and applicable trade secret laws, particularly where auditors access systems containing third-party personal data or confidential business information. For EU/EEA customers, permitting third-party access to systems containing personal data may require assessment under GDPR data protection impact assessment (DPIA) procedures. HIPAA-covered entities should assess whether permitting PlanetScale auditors access to systems that may contain PHI requires additional BAA provisions. (2) GOVERNANCE EXPOSURE: Medium. The breadth of the audit right is operationally significant for enterprise customers, particularly those in regulated industries where system access is tightly controlled. The absence of defined notice periods, frequency limits, and audit firm confidentiality obligations in the agreement text creates ambiguity about how this right may be exercised in practice. (3) JURISDICTION FLAGS: EU/EEA customers face heightened exposure where audit access to systems containing personal data could constitute a data transfer or unauthorized processing event under GDPR. HIPAA-covered entities in the U.S. must ensure any audit access is consistent with minimum necessary standards. Customers in jurisdictions with trade secret protection statutes should assess whether cooperation obligations could require disclosure of proprietary system information. (4) CONTRACT AND VENDOR IMPLICATIONS: Procurement and legal teams should evaluate whether this clause requires negotiation of additional confidentiality obligations for any designated auditing firm. Standard commercial audit clauses typically include advance notice requirements (often 30 days), frequency limits (typically once per year absent cause), and scope restrictions; the absence of these in this agreement is a potential negotiation point. Customers should assess whether internal security policies permit the level of access contemplated by this provision. (5) COMPLIANCE CONSIDERATIONS: Legal and security teams should establish documented procedures for responding to an audit request under this clause, including pre-audit preparation steps and confidentiality protections. Organizations handling regulated data categories should conduct a legal review before permitting any audit access to systems containing GDPR special category data, PHI, or financial records. The obligation to provide 'reasonable cooperation' should be defined in any enterprise order form to avoid ambiguity.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes physical and records-based audits of customer infrastructure, which may extend to sensitive business systems and data beyond the scope of PlanetScale's database service. The scope of 'facilities, computers and records' is broad and the agreement does not specify prior notice requirements, audit frequency limits, or confidentiality obligations applicable to the auditing firm.
Under this clause, customers agree to permit PlanetScale or a designated independent accounting firm to audit their physical facilities, computer systems, and records during business hours. The agreement requires reasonable cooperation with such audits but does not define limits on audit scope, frequency, or advance notice requirements.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PlanetScale.