Regulatory bodies and / or standards organisations.

Some kind of "This devices meets or exceeds the International Organization for Standardization of mobile device security..."

We don't even have a voluntary one of those.