What we check
- The firm is real and active, and its main business is cybersecurity or compliance.
- It has a Canadian head office or a named Canadian office.
- The website and contact details resolve and belong to the firm.
- The services, frameworks and credentials on the listing match what the firm actually offers and holds.
- The person asking speaks for the firm, confirmed from an address at the firm’s domain.
What it does not mean
Verification is a check on accuracy and legitimacy. It is not an endorsement, a ranking, a certification, a security audit of the firm, or a guarantee of the quality of its work. A framework on a listing means the firm works with it, not that the firm is accredited for it. Confirm accreditation with the body that issues it.
It cannot be bought
There is no fee to be listed, verified, or reviewed. Verification does not change where a listing appears; the directory is sorted alphabetically.
How to request a review
Use the contact form and choose “Verification review”, or follow the “Is this you?” link on your listing. Write from an address at your firm’s domain. We may ask for a document that supports a credential, such as a certificate number we can look up with the issuer.
Keeping it current
We show the date of the last review on each verified listing and recheck periodically. If details fall out of date and we cannot confirm them, the badge comes off until they are confirmed again.