The findings are reported to the client, usually the company, and can be used for internal review or legal action.