Service Introduction

Personal Information Protection Compliance AuditThe process by which an independent third-party professional institution evaluates and supervises whether the personal information processing activities of personal information processors are legal and compliant in accordance with the Personal Information Protection Law of the People's Republic of China and relevant national standards.

This service is carried out by us in accordance with regulations and standards such as the Personal Information Protection Law and GB/T 35273-2020 Personal Information Security Specification, through various methods including document review, personnel interviews, and technical verification. The audit content comprehensively covers the entire life cycle of personal information, with a focus on verifying the compliance of each link, including the collection, storage, use, processing, transmission, provision, disclosure, and deletion of personal information. It also includes in-depth detection of the effectiveness of the App's privacy policy, user rights response mechanism, and technical security measures, and ultimately issues a legally binding"Personal Information Protection Compliance AuditThe report clearly identifies non-compliant items and provides rectification suggestions.

Personal Information Protection Compliance AuditIt is mainly applied in the following scenarios:

Compliance review for enterprise IPO listing

Self-inspection of compliance for App/ mini-program listing

Regulatory authorities are preparing for inspection and rectification

Internal data governance within enterprises

Due diligence for major business mergers and acquisitions

"ThroughPersonal Information Protection Compliance AuditIt is not only a key measure for enterprises to avoid legal risks and fulfill their primary responsibility for compliance, but also a necessary means to respond to regulatory concerns, pass the review of the competent authorities, and establish a user trust mechanism.

Test range

Test basis and cycle

Test basis

In accordance with GB/T 25000.51-2016 "Systems and Software Engineering - Systems and Software Quality Requirements and Evaluation (SQuaRE) - Part 51: Quality requirements and test details for ready-to-use software products (RUSP)", requirements specification, contracts, design documents, etc.

Test cycle

It takes 5 to 15 working days. Special requests can be expedited.

Testing process

  1. 01

    Demand communication

    Confirm the system scope, acceptance objectives and report purposes.

  2. 02

    Data review

    Sort out contracts, requirements, configuration items and deployment materials.

  3. 03

    Formulate a plan

    Form an assessment plan, use cases and execution arrangements.

  4. 04

    Carry out the test

    Conduct a tripartite evaluation and verification of the configuration items in accordance with the standards.

  5. 05

    Deliver the report

    Issue test reports and support acceptance and archiving.

Output results

Testing Report

Software Test Report

CNAS CMA
Purpose of the report Acceptance, auditing, bidding and tendering
Report content Test conclusions, basis, and records
Service recipients Government agencies, universities, enterprises and public institutions
Delivery method Electronic scanned copy, paper version
Cover example of CMA/CNAS software test report

Authority

Form a reviewable third-party testing conclusion based on the CNAS national accredited laboratory qualification, testing basis and execution records.

Traceable

Retain records of test cases, software defects, retests and inspection results, and adapt to the archiving of information-based acceptance materials.

It can be placed on the ground

The software test report expression is oriented towards review, expert acceptance and project management units, reducing the cost of secondary interpretation.

Service advantages

CMA/CNAS national recognized testing capabilities

Establish standardized processes around software evaluation, informatization acceptance, and the delivery of third-party software test reports. The reports should be clearly expressed, facilitating review and archiving.

1000+ Cumulative issuance of reports
30+ Covering industry fields
99% Report acceptance pass rate
10"Year +" Experience in testing services

CMA/CNAS qualification

The report is stamped with the CMA metrological certification and CNAS accreditation marks, which have legal effect and directly meet the requirements for project acceptance and auditing.

Independent third party

The testing institution has no interest connection with the developer or the client. The testing process operates independently and the conclusions are true and reliable.

Fair and objective

Strictly in accordance with national standards and contractual agreements, the test conclusions are not subject to interference by the client and can stand up to review and re-examination.

Serve the whole country

Support remote and on-site detection of software projects across the country, standardize service processes, and ensure consistent report quality.

Relevant successful cases

APP Personal Information Security Inspection Report

APP Personal Information Security Inspection Report

We offer personal information security detection for apps, helping individuals and enterprises verify the legality of mobile application behavior analysis and collection of personal information, as well as the legality of APP permission detection content. This effectively assists government agencies and industry regulatory bodies in providing administrative law enforcement basis, and helps APP development companies and APP operation companies offer professional rectification suggestions for apps. Provide efficient, accurate and complete personal information security detection reports for apps.
Acceptance test of the electronic control data management platform of China Automotive Technology and Research Center

Acceptance test of the electronic control data management platform of China Automotive Technology and Research Center

The acceptance test of the electronic control data management platform of China Automotive Technology and Research Center involves functional testing, performance testing and safety testing of the data management platform. Users: Geely Commercial Vehicles, SAIC-GM-Wuling, XPeng Motors. Tests on functional suitability and accuracy will cover all functional modules of the system's subsystems, conducting interface tests, functional tests, compatibility tests, interface tests, performance tests, and security tests on each module.

Solution entry

Software Test Report for the Final Acceptance of Scientific and Technological Research projects

The conclusion and acceptance of scientific and technological research projects require software testing reports. The conclusion and acceptance report should formulate testing plans and strategies in accordance with the requirements of project conclusion and acceptance. Only in this way can the conclusion and acceptance of scientific research projects be meaningful. The content of the software testing report covers the main technical indicators such as functions, performance, and security. A high-quality testing report can not only help the project to be concluded smoothly It can also lay a foundation for the subsequent transformation of achievements.

Software Project Acceptance Test Report - CNAS Software Inspection

The acceptance testing of software research projects covers multi-dimensional assessment requirements such as functionality, performance, and security. The acceptance process of software research projects follows the GB/T 25000.51-2016 standard. The cover of the software test report is stamped with the CNAS logo, and the test report is guaranteed by national authoritative qualifications, which helps the project to be accepted smoothly and improves the quality of the software.

Software acceptance testing for Internet of Things (iot) intelligent devices

By providing software acceptance testing solutions for Internet of Things (iot) smart devices, the software quality and network security of iot products are guaranteed. The key elements of software acceptance testing: functional testing, performance testing, security and privacy testing, compatibility testing, and user experience testing. These elements jointly ensure the overall quality of Internet of Things products.