Section 14(1)(h) in The Aadhaar (Authentication) Regulations, 2016
(h)ensure that its operations and systems are audited by information systems auditor certified by a recognised body on an annual basis to ensure compliance with the Authority's standards and specifications and the audit report should be shared with the Authority upon request;