What are audit requirements for non-STPI companies?