Bundles are not certification

This is the most important distinction in the whole track. A bundle is named for the framework it maps to; it is not a certification or a claim of compliance. Key points:

• Always say "compliance policy bundles." Never say the platform, or your organization, is "certified" or "compliant" because a bundle exists.
• A bundle maps your evidence to a framework's controls. Certification is a separate, external attestation that the bundle does not provide.