A gap matrix is better than a row of badges.
This page shows what is required, what is ready, and what is not claimed. It becomes an evidence index only when real documents can be published or shared under control.
How to read states
‘Prepare’ is work. ‘Not claimed’ is an explicit absence. Neither should be disguised as evidence.
Expected controls and evidence.
Listing, manifest, policies, and vendor information.
Legal basis, purposes, rights, retention, and subprocessors for the real product.
No report or attestation is available in this showcase.
No addly certification is asserted.
No badge or participation is implied.
Contrast, keyboard, focus, reduced motion, and tests still need documentation.
The evidence packet must remain versioned.
A policy without a date, owner, or covered product quickly becomes misleading. Every piece of evidence must state its scope and version.
- 01Covered product and hosting.
- 02Control owner and last review.
- 03Source document or attestation link.
- 04Known exceptions and remediation plan.
- 05Expiry date or next assessment.
The next badge will be added only after the evidence.
Until then, use the matrix to prepare the controls genuinely required for publication and enterprise purchase.