Depending on the objective, medical record audits can be performed either by an external agency or by staff within an organization. Audits conducted by a third party are generally to review compliance, and internal audits are usually performed to evaluate current treatment processes and measure quality of care.