“We are not ISO 27001 certified but X.509 certified.”