Security, Security, Security!!! I prefer not to use it as too many variables can be at play. You have to count on other companies security. This audit can be very complex, not accessible to 'outsiders', so it's usually unverifiable. A company's word isn't good enough.