NDAs and Audit Reports

Heard from an industry analyst:

One customer working with a cloud provider wanted to see the audit report (SAS 70). The provider said "OK, sign the NDA." The customer signed the NDA, and the provider refused to send them the report.

"We signed the NDA" said the customer. Provider: "Yes, but you didn't read it. It says that we may choose not to send the audit report to you, and if we choose not to, you can't tell anybody that we refused."