Every issued certificate should resolve to a public record showing exactly what was evaluated, under which profile, for how long, and whether the status remains valid.
A credible certification program needs a way for customers, researchers, employees or affected parties to report a false claim, scope violation or observed control failure. Complaints should be logged, investigated, dispositioned, and able to trigger surveillance, suspension or withdrawal. Applicants also need an independent appeal path for disputed certification decisions.
Registry status: IN DEVELOPMENT. When the certification program launches, customers will be able to verify certificate ID, scope, version, status, expiry and surveillance history here.