About Archvault
Archvault is an independent cybersecurity certification body. We publish the Archvault Standard, assess organisations against it, and maintain the public register of certified organisations.
Independence
Archvault is a certification body, not a security services provider. We do not sell managed security services, monitoring, or remediation. Organisations are free to use any provider - or their own team - to implement controls. This separation means the body verifying your security has no commercial interest in the work being verified.
Why Archvault exists
Due-diligence questionnaires arrive in a different format from every client, and a questionnaire tells your clients what you say - not what was independently checked. Organisations selling into regulated supply chains, such as the life sciences, are increasingly asked to prove their security posture as a condition of doing business.
Archvault answers that need once: a published standard, an independent assessment, and a public register entry that any client, partner or insurer can check for themselves.
Governance
The Standard is maintained under a published review cycle, with versioned releases and a defined complaints and appeals process. Scheme documents are available to participating organisations.