Independent Security Evaluator for the Trust Framework Authority (TFA)

SAARA is an accredited Independent Security Evaluator under the Digital Identity Services Trust Framework Authority (TFA), appointed to deliver robust, impartial security assessments for digital identity providers across New Zealand.

Our history of 35+ years in security—encompassing cyber, physical, and process domains—underpins our capability to ensure your digital identity service meets every Trust Framework requirement

What We Offer

  • Tailored TFA Security Reviews
    Precise compliance evaluations aligned to TFA’s technical, procedural, and regulatory standards.
  • Threat & Risk Assessments
    Technical diagnostics, social engineering reviews, and threat modeling to uncover hidden vulnerabilities.
  • Policy & Process Audits
    Aligned with ISO 27001, TFA standards, and te ao Māori principles, ensuring comprehensive, culturally aware review.
  • Independent Evaluation Reporting
    Clear, actionable reports to support accreditation, drive improvements, and reassure stakeholders.

Why SAARA?

Holistic expertise – Physical, technical, and process security—all under one roof
TFA-specific experience – Deep familiarity with Trust Framework requirements
Aotearoa-wide coverage – Offices in Auckland, Hamilton, Tauranga, Wellington; national reach
Transparent & practical – Reports focused on clear insight, next steps, and value
Trusted, regulated process – Accredited evaluator with deep understanding of compliance workflows

 

Our Evaluation Approach

  1. Scoping & Discovery
    We build trust with your team, identify key assets, and align scope with TFA criteria.
  2. Technical & Physical Assessments
    Dual focus on cyber systems and site surveys—mirroring SAARA’s robust physical security heritage.
  3. Policy & Cultural Review
    Evaluating your policies for inclusivity and adherence to both ISO, TFA rules, and te ao Māori values.
  4. Report & Roadmap Delivery
    You receive a clear report of findings, prioritised remediation steps, and a compliance roadmap.
  5. Support Through Accreditation
    We stand with you throughout TFA submission, review, and any follow-up actions.

Who Should Engage SAARA?

  • Digital identity providers preparing for TFA accreditation
  • Tech organisations delivering digital identity services to NZ agencies
  • Enterprises seeking independent validation of digital identity controls
Contact SAARA

Trusted By 

What our clients say

“We were under pressure to deliver on a major programme review and lacked the internal capacity. SAARA provided experienced assessment writers and moderators who got the job done quickly and to a very high standard. Their communication throughout was excellent.”
— Melissa H.

“What stood out about working with SAARA was how people-centered their approach is. They didn’t just tell us what to do—they worked alongside our staff, listened, and adapted their support to suit our culture. A real partner in change.”

— James R.

"SAARA provided us with project coordination and documentation support during the implementation of new building access systems. Their attention to detail and ability to align technical and operational goals was outstanding.”— Simone D.