An Audit would definitely be a start but it better be from a *reputable* 3rd party, thoroughly verifiable. I don't see how providing proof for the other 9 items I stated would be considered 'unrealistic'? All other legitimate companies provide it.