I would highly suggest that information be part of the Quality Agreement. The Quality Agreement will usually give the parties details on: audit (days, amount of people), document or batch record review, 3rd party audit information, information on the supplier's product issues with their critical vendors, etc.