CPA WebTrust | WebTrust Facts | Helping Your Business Grow | WebTrust FAQs WebTrust FAQs What does the Webtrust seal do for me and why do I want to pay for it? One of the primary obstacles impeding the ability of most businesses to succeed with Internet commerce is broad public concern over the privacy and security of Websites they would otherwise do business with and the legitimacy of many business entities, especially small businesses, offering products and services over the Internet. Webtrust, a service performed by CPAs (CAs), who are widely accepted as having the public's trust for independence and integrity provide the assurance that Websites containing the Webtrust seal meet high standards of security, privacy and legitimacy. In addition to benefiting your customers, the Seal is evidence that your site has working controls and security in place that are as important to your company's own protection as they are to your customers. How can I get the Webtrust seal? The Seal can be obtained by engaging a CPA (CA) who offers the Webtrust service. Your CPA (CA) is either offering the service now or is likely to be doing so in the near future. If this is not the case, a listing of CPAs (CAs) who offer the service can be found on the Websites of the American Institute of Certified Public Accountants (AICPA) at their Website (www.aicpa.org) (Canadian Institute of Chartered Accountants at www.cica.ca). How does my Website qualify for the Webtrust seal? To earn the seal, Websites must comply with the Webtrust principles issued by the American Institute of Certified Public Accountants (Canadian Institute of Chartered Accountants). The standards deal with the existence of Website disclosures, controls and practices in three areas - 1) your company's business practices as they relate to commercial offerings on your company's Web site; 2) the accuracy and completeness of commercial transactions made through your site; 3) and the measures in place to assure the privacy and security of private information at your site. Your Website must meet the Webtrust principles in all three areas to receive the Webtrust seal. What if my Website does not qualify? Your CPA (CA) can provide the guidance necessary to bring your Website into compliance with the required principles. As these principles address proper and broadly accepted internal controls and practices for operating your Website, it makes good business sense to operate your site in accordance with these business principles. Does my Website need any special hardware or software to be compliant? The extent of your investment in hardware and software depends on the size, complexity and type of your Website. If your site is hosted by a third party Internet Service Provider (ISP), most of the software and hardware issues will likely rest with the ISP. However, if your company maintains it own Web hardware and software, your Website will require software that maintains transactional integrity as well as firewall, encryption as well as other hardware and software elements required for information protection. These elements are as important for the protection of your company as they are for your customers. It is very risky to be engaged in Internet commerce without having transactional and security controls in place. How much does Webtrust cost? The cost of Webtrust is likely to be commensurate with that of many other consulting services rendered to your company by your current accounting firm. How long is the Webtrust seal valid? The Seal is valid as long as it continues to receive CPA (CA) assurance that the Website is compliant with Webtrust principles. Under these guidelines, the site must be tested for compliance at least every ninety days. Although, depending on the nature and complexity of the Website and your business, more frequent testing may be required. Under what circumstances can the Webtrust seal be revoked? CPAs (CAs) are required to revoke the Seals of Websites that fall out of compliance with the principles as currently published by the AICPA (CICA). In addition, the Seal will automatically expire and disappear from sites if not refreshed by a qualified CPA (CA) at least every ninety days. My company is ISO 9000 compliant and my financial statements are audited by a CPA (CA). Why do I need Webtrust? The Webtrust seal was developed to be widely recognized by the public and other businesses as the premier form of assurance pertaining to the privacy, security and legitimacy of Internet Websites. ISO 9000 compliance is far broader and less specific than Webtrust - and much less well understood by the public. The standards pertaining to the audits of financial statements are different than Webtrust principles and do not cover assurances pertaining to electronic commerce over the Web. My company enjoys a solid reputation and our Website maintains strong transactional control, uses passwords, anti-virus and firewalls. Why do I need the Webtrust seal? The primary purpose of Webtrust is to overcome a key obstacle to the success of most companies with their Internet sales efforts, which is broad public concern over the privacy and security of Websites and the legitimacy of many businesses. While a company's Website may be in compliance with the Webtrust principles, there is no way a potential customer can be assured of this unless the Webtrust seal is affixed to the site. Am I restricted in how I can use the Webtrust seal on my Website? Yes. Use of the Webtrust seal is licensed exclusively to your Website by CPAs (CAs) that offer this service. It cannot be copied, duplicated or re-engineered in any way. Speak to your CPA (CA) for further details. Back to our WebTrust page