Home of the Verify™ Risk Assessment and Statement Of Trust™

Independent evidence for cybersecurity, privacy, compliance and operational trust. 

Why Complete the Annual Verify™ Risk Assessment

Canadian organizations rely on suppliers, software, service providers and business partners they cannot fully observe. A policy, certificate or test result may answer one question. Serious decisions often require the whole evidence picture. 

Verify™ is Informatica’s annual, standardized risk assessment methodology. It brings together existing audits, certificates, policies and test results, then adds current interviews, control review and technical assessment where needed. The work determines what the evidence supports, what remains unresolved and what the organization can responsibly say. 

Developed within a Canadian trust ecosystem with roots publicly traced to 1989, Verify™ rests on a simple principle: trust should be earned through evidence and kept current through review. 

Two men talking about an ambassador program

What it Means to Verify™ Policies, Controls and Compliance?

Verify™ follows three clear stages: 

1

Qualification

Confidential due diligence produces a Go or No-Go decision on whether the organization and proposed scope are suitable, legitimate, auditable and verifiable. 

2

Verification

Independent professionals review documents, interview key people, assess controls and technical evidence, and perform testing appropriate to the scope. The private outputs are the assessment report, Roadmap for Remediation™ and RMS. 

3

Attestation

When the evidence supports a professional conclusion, the organization receives a Statement of Trust™ and enters a 12-month support period with three quarterly Checkpoints and agreed re-verification. 

Demand Professional, Independent Verification

Canada’s economy runs through networks of suppliers, cloud platforms, professional services, finance, education, healthcare, public institutions and critical infrastructure. Risk does not stop at one organization’s boundary. 

Independent evidence helps buyers choose responsibly, gives boards a defensible basis for trust and lets capable Canadian businesses compete on substance rather than assertion. 

Earning the Official Statement Of Trust™ Attestation

The Statement of Trust™ is the signed, public-facing result available to an eligible organization after Verify™. It identifies the legal entity and reviewed scope, explains the basis of the work, records the applicable RMS, material conditions and limitations, states the validity period and provides a way to confirm authenticity. 

PRINT

Printed certificate with a unique holographic authenticity seal, providing a professional, verifiable credential suitable for display and presentation.

PDF 

Shareable PDF for procurement, insurance, financing, RFPs, board records and customer diligence. 

LIVE BADGE 

Clickable website badge that opens the current Statement of Trust™ or live verification record in the visitor’s browser. 

The detailed assessment report remains confidential unless the client chooses to disclose it. The Statement of Trust™ communicates the supported conclusion without publishing sensitive findings. 

Independent Verify™ Attestations Are Exclusively Available From

datarisk.ca 

Cybersecurity risk assessment, security testing, control effectiveness, audit evidence and cyber-risk attestation. 

Learn More

managedprivacy.ca 

Privacy impact assessment, privacy governance, safeguards, legal obligations and privacy attestation. 

otsec.ca 

Industrial and OT cybersecurity, cyber-physical resilience, supplier assurance and standards readiness. 

Learn More

Verify™ & Statement of Trust™ – FAQ 

Verify™ is Informatica’s annual risk assessment methodology. It combines confidential Qualification, independent Verification and a 12-month Attestation period. 

It is the independently signed, public-facing attestation available to an eligible organization. It states who and what was reviewed, the basis and limits of the work, the validity period and how authenticity can be confirmed. 

Private deliverables include the assessment report, Risk Maturity Score and Roadmap for Remediation™. Eligible organizations also receive the Statement of Trust™ in printed, PDF and live-verification formats. 

Yes. Current SOC 2 reports, ISO certificates, penetration tests, PIAs and other credible evidence can reduce duplicated work. Verify™ reviews their scope, date, exceptions and relevance, then identifies what still needs assessment. 

It is issued for a defined annual period and supported by three quarterly Checkpoints, professional support and agreed re-verification. 

For customer diligence, procurement, supplier onboarding, insurance, financing, board oversight, RFPs, partner reviews, investor discussions and public trust pages. 

Need independent evidence behind an important business claim? Start with the material you already have.