Why not just go OTCM route? They already have access obviously since they got a VP, this audit shouldn’t take 2 years smh