The real status of the ISO/IEC 27001 certifications and what verifiable trail the platform leaves for an audit or a vendor questionnaire.