For some of the large clients I have, they require (and pay for) an independent company to come and audit my home office to make sure it meets their standards. The auditing company was provided with a litany of requirements from our shared client.

The first time it was a little odd, but it's routine for those companies who have sensitive IP.