Every deliverable shipped from a vCAIR Readiness Bundle or Certification engagement is counter-signed by a Lead Auditor accredited under an IAF-MLA recognized scheme — the accreditation tier that survives a CB transition by design. The credential is portable; the specific Certification Body is interchangeable.
The International Accreditation Forum's Multilateral Recognition Arrangement is the international agreement that lets a Lead Auditor accredited in any IAF-MLA member country sign deliverables that are recognized by every other member's regulators + auditors. That's 110+ countries including the EU, UK, US, Canada, Australia, Japan, Singapore. Your end-customer's audit committee asks "who signed this?" — they get an answer that's defensible in every jurisdiction they operate in.
Why this matters more than the specific CB: Big-4 won't co-sign someone else's work. Independent auditors won't sign without doing the engagement themselves. SOC 2 attestation vendors (Vanta, Drata, Secureframe) don't have auditor credentials at all. The IAF-MLA accreditation tier is the structural moat — and because it's portable across Certification Bodies, it survives any single CB relationship change.
Lead Auditor credential: Cert 2697gssmkw
Mastermind Assurance is our primary CB anchor. The signature you receive is valid because the auditor holds an IAF-MLA accredited Lead Auditor credential — Mastermind administers the credential, but the recognition flows from the IAF-MLA scheme.
A second active IAF-MLA-scheme credential ensures continuity.
Any disruption to the primary CB relationship is a swap, not a teardown. Customer counter-signatures remain valid under the same accreditation tier.
If your audit doesn't pass within the guarantee window — Stage-1 prep for Bundle, Stage-1 + Stage-2 for Certification — we issue a full refund. No prorating, no "we did our best." The credentialed counter-signature carries the contractual weight; we put the dollars behind it.
Mechanically: every Bundle / Certification purchase creates an audit_pass_guarantees row visible in your /settings/billing page with the live countdown. An automated cron fires audit_pass.refund_due at day 0 + our team confirms externally + Stripe issues the refund within 5 business days.
Every counter-signed artifact carries a cryptographic proof — see the 15-minute demo for how the Lead Auditor signature chains into the Merkle-anchored audit ledger so it's tamper-evident.