How trust works across the whole marketplace.

No function reaches the catalog without clearing identity verification, a baseline security review, and a sample-data test run first. This applies uniformly, regardless of category or publisher size. See the full criteria for each grading tier on theTrust & Badges page.

Document processing functions in particular often handle sensitive business data: invoices, contracts, receipts, leave records. Every publisher's data handling and storage practices are reviewed as part of the baseline security review, and Axrail-Certified functions undergo a deeper, jointly audited review of the same.

A fuller published compliance standard covering Malaysia's Personal Data Protection Act and comparable frameworks across the wider SEA region is in development. Current terms are detailed in thePrivacy & PDPA policy.

Grading tiers are re-evaluated on a rolling basis, not granted permanently. A function's usage volume, rating, and audit standing are monitored continuously, and a grade can be revoked if standards slip. This keeps the grading marks meaningful as the catalog grows.