Transparency includes your data.
Your account and progress
We keep your account details, organization information, answers, and course progress so you can save your work and manage your reports. Your password is stored securely, not as plain text. No email address is required. Usernames, passwords, and unpublished progress are not included in public reports. You stay signed in for up to seven days. Changing your password signs you out on all devices. If you forget it, contact the operator of this site for a reset after they confirm your identity.
What becomes public
Signing a declaration publishes your organization name, website, signatory name and role, questions, answers, scores, course completion, specification version, issue and expiration dates, and certificate status. Anyone with the certificate number or link can access the record and download its report. Do not include secrets or sensitive personal information. The organization and website are self-declared; domain ownership is not verified.
What passing means
A Sock Too v1.0 attestation records passing all six knowledge checks, an unrounded control average of at least 80%, and implementation of all six essential controls across the organization. The control answers are the organization's own statements; evidence is not collected or independently examined. This does not establish legal compliance, independent verification, or equivalence to other certification schemes. You must be authorized to represent the organization, answer accurately, and revoke the record if a material change makes it inaccurate.
Corrections, expiration, and renewal
Issued reports preserve their original declarations. You can revoke a record and issue a new one after reviewing the course, passing its checks again, and reconfirming all controls. Revoked and expired records remain publicly accessible with their current status. Downloaded or shared copies may remain elsewhere. Attestations expire one year after issuance.
Retention and requests
We keep your organization’s information and issued reports so certificates can still be checked. For account access or deletion requests, contact the operator who invited you to this instance. Published records must keep an accurate status. Account deletion is handled by the operator, not through the app.
Cookies and services
We use a cookie to keep you signed in. There are no advertising trackers or analytics scripts. Our hosting providers may process connection information. Embedded badges connect to Sock Too to display their status. External reading links are optional.
Contact availability
The contact form is not yet available. For existing accounts, contact the person who set up your access.
Open specification and brand
The framework and course content are licensed under CC BY 4.0. The Sock Too name and issuer badge are reserved. You may embed your issued badge with its verification link; do not alter its status, imply independent verification, or present an expired, revoked, or preview record as a current v1.0 pass.