What would make sense is that the auditor be reputable and have access to all the sensitive private information. The auditor would check as many samples as they

What would make sense is that the auditor be reputable and have access to all the sensitive private information. The auditor would check as many samples as they need to satisfy their conclusion that join.app.net met the $500k legit. Since the auditor was reputable and signed a contract to attest the $500k, the auditor would be careful to not divulge any of the sensitive, personally identifiable information.