They are tested and certified regularly through a combination of frameworks and assessment activities including Service Organization Control Management Program, Health Insurance Portability and Accountability Act (HIPAA), and others.