Hacker News new | ask | show | jobs
by crote 12 days ago
Technically it doesn't - it just needs to be compliant.

It is completely left up to you how you are going to demonstrate this if they ever come asking for the paperwork proving this. This can be a certification by an independent testing lab, documentation from in-house tests, or perhaps even documentation proving that it is compliant by design.