“Secure”. So what audits or certifications do they have verifying it is secure? What is the operational domain and against what threat models? I see no mention

“Secure”. So what audits or certifications do they have verifying it is secure? What is the operational domain and against what threat models? I see no mention of any of that anywhere obvious. Do you get to just make up core properties of your software because it feels good?