The grandparent asked whether they have had a security audit, and parent said "I don't believe they've had an independent security audit." Seems like a straightforward reply to those.

Oh. Duh. You're right. I was skimming my threads and lost the context. Thanks for pointing this out.