How does one audit that claim, short of being physically in your server halls and inspecting all your code and infra?