Auditing Corporate Surveillance Systems