Determine which legal clause the following paragraph belongs to: 9.1. Records. The Supplier shall when requested make available to the Customer or its Regulators, reports and records, including but not limited to written assurance that any data centre hosting Customer Data is compliant with Good Industry Practice security standards, the outcome of any BOP testing, risk management assessments, security attestations, or independent security attestations( e. g. SOC 2 or SOC 1 report, penetration testing results- for applications and infrastructure) which shall be limited in scope to the Services provided to the Customer.