← Back to context

Comment by bpt3

5 hours ago

Okay, if you want to pass responsibility off to someone else, how does the third party auditor do it?

I'm not talking about checking a compliance box, I'm talking about actually confirming no backdoor exists.

That's proving a negative. You are always going to end up with something like 'to the best of our ability'.