Our infrastructure
An isolated environment operated by Testmera, with agreed access, data location and deletion terms.
Testmera / How it works
A clear scope.
A report you can act on.
Agree the boundaries, assess independently and keep the evidence current as your system changes.
From agreed scope to maintained evidence.
Agree the scope
Define the environment, grader, configuration, assessment categories, intended use and exclusions. Agree confidentiality, access and deployment boundaries before work starts.
Independent assessment
We assess the agreed scope in isolated infrastructure. Work remains within the authorised boundaries; public descriptions stay at category level.
Signed report
Receive a signed report with a scoped verdict, findings by category, coverage, confidence and limits. Unknowns are distinguished from supported findings. Detailed evidence is shared privately with authorised recipients.
Fix support and re-certification
We help prioritise and review fixes, then reassess the changed configuration. The updated verdict reflects new evidence and preserves the history of the original assessment.
Optional continuous CI check
Agree recurring checks for changes in your development workflow. Current status remains tied to the checked configuration and scope; changes outside that scope trigger review.
Choose where the work runs.
Your infrastructure
Assessment inside your controlled infrastructure, including on-premises options. We agree access and evidence handling around your security requirements.
EU-sovereign
An EU-sovereign arrangement scoped around your required region, operator control and access restrictions. Those requirements are confirmed in writing before work begins.
What you provide
- An authorised point of contact and the intended use of the environment and grader.
- The agreed configuration, relevant documentation and a reproducible setup or approved access.
- Assessment priorities, known constraints, permitted data and acceptance criteria.
- Confidentiality, data location, retention and reporting requirements.
Start with a short, non-sensitive description by email. Arrange a secure channel before sharing credentials, private code, datasets or detailed findings.
Planning ranges
- Scope and readiness
- 2–5 working days
- Assessment and report
- 1–3 weeks after access and setup are ready
- Re-certification
- 3–10 working days after fixes are ready
These are indicative planning ranges, not delivery guarantees. Scope, setup, access constraints and remediation can extend the schedule. The engagement agreement confirms timing; continuous CI cadence is agreed separately.