Immediately after the retention period, the Service Provider shall have its internal or external auditor to certify to OCBC that the Service Provider has returned to OCBC or destroyed all Information in its custody and no record or copy thereof remains in its possession.