It is the auditor's. Confidentiality agreements are very useful to prevent unauthorized disclosures of information, but they have inherent limitations and risks.The standard agreement between an auditor and issuer may contain general provisions regarding confidentiality. NDAs, or non-disclosure agreements, are legally enforceable contracts that create a confidential relationship between a person who has sensitive information.