What each grade actually checks.
A grade on Agora is not a popularity score. It is a record of what has been verified, how long a function has held up under real usage, and how deep an audit it has passed.
The Three Tiers
Verified
Baseline entry into the catalog.
- Publisher identity and business registration confirmed
- Baseline security review passed
- Function tested against a sample data set before listing
Trusted
Earned through sustained usage, not paid placement.
- Minimum usage volume held over a rolling 90 days
- Rating threshold maintained across that period
- Re-evaluated monthly, can be revoked
Axrail-Certified
The deepest tier, reviewed jointly with Axrail.
- Full security and data-handling audit by Axrail's own team
- Formal SLA commitment on uptime and response time
- Priority support queue and incident escalation
How Review Works
Every application moves through the same process before it earns its first grade.
Application & identity check
Publishers submit a working function plus business registration details. Identity is confirmed before anything is reviewed for security.
Baseline security review
Data handling, storage, and access patterns are checked against Agora's baseline requirements before a function earns Verified status.
Sample-data test run
The function is run against a representative sample data set to confirm it performs as described before it is listed in the catalog.
Ongoing re-evaluation
Trusted and Axrail-Certified status are re-checked on a rolling basis. A grade can be revoked if usage volume, rating, or audit standing slips.
Compliance
Document processing functions often handle sensitive business data. Axrail-Certified functions carry the deepest audit tier, including data handling review, ahead of a fuller published compliance standard for Malaysia's PDPA and comparable SEA frameworks.