Current Region:
Global

Independent, government accredited certification bodies test providers’ claims rather than taking them on trust. Auditors examine accuracy, security, privacy and retention practices against published standards, including whether data really is deleted when the provider says it is. Certification must be renewed periodically, complaints are investigated and certificates can be withdrawn. Certified providers appear on public registers, so websites, regulators, journalists and consumers can all check who has passed. When we describe what a welldesigned system does, certification is what turns that description from a promise into a verifiable property.