How do you handle confidentiality during an audit?

NDAs are signed before any code or architecture access. Source code stays in your repository, we work with read only access. Stakeholder interviews are conducted under confidentiality. Reports are shared on encrypted channels and only with people you designate. For due diligence engagements, additional confidentiality structures (separate signed engagement letters, restricted distribution lists) are arranged as needed.