Trustworthy Repositories Audit & Certification

Trustworthy Repositories Audit & Certification
Name	Trustworthy Repositories Audit & Certification
Abbreviation	TRAC
Formation	2007
Type	Standards body
Purpose	Digital preservation audit and certification
Headquarters	International
Region served	Worldwide

Trustworthy Repositories Audit & Certification is an audit and certification framework for digital repositories that evaluates organizational infrastructure, digital object management, and technical systems. It provides a structured set of criteria adopted by cultural institutions, research libraries, and standards organizations to demonstrate reliable long-term preservation practices. The framework interfaces with archival institutions, national libraries, university presses, and consortia to align preservation capabilities with stakeholder expectations.

Overview

The framework articulates criteria for repository trustworthiness used by institutions such as the Library of Congress, British Library, Bibliothèque nationale de France, National Archives (United States), and National Archives (United Kingdom), and by international bodies like UNESCO, International Organization for Standardization, and Council of Europe. It informs certification programs implemented by organizations such as the Digital Preservation Coalition, Research Libraries UK, OCLC, Internet Archive, and university libraries including Harvard University, University of Oxford, and Stanford University. The rubric is also referenced by research funders like the National Science Foundation, European Research Council, and Wellcome Trust for data management planning. In practice, repositories including arXiv, Zenodo, and institutional repositories at Massachusetts Institute of Technology and University of California apply the framework to assess preservation readiness.

History and Development

The framework emerged from discussions among stakeholders at meetings involving International Council on Archives, Digital Curation Centre, Council on Library and Information Resources, and representatives from national archives including National Archives of Australia and Library and Archives Canada. Early development built on models such as the Open Archival Information System (OAIS) used by NASA, European Space Agency, and national space agencies, and drew on standards from ISO/IEC committees. Pilot audits and working groups included participants from Jisc, DARE, DANS, and research infrastructure projects funded by the European Commission and national research councils. Over time, collaborations with organizations like the International Federation of Library Associations and Institutions and the Society of American Archivists shaped revisions and outreach.

Certification Criteria and Principles

The criteria cover organizational policies, legal and regulatory context involving entities such as national copyright offices, governance structures seen in institutions like Smithsonian Institution and Guggenheim Museum, infrastructure resilience modeled after National Weather Service data centers, and technical workflows similar to those at CERN and Los Alamos National Laboratory. Principles emphasize accountability, transparency, integrity, and sustainability with parallels to practices at British Museum, Metropolitan Museum of Art, and Yale University. Specific metric areas reference preservation planning, acquisition, metadata standards used by Dublin Core, PREMIS, and data formats endorsed by Library of Congress, as well as operational controls akin to those in International Civil Aviation Organization safety management and World Health Organization quality systems.

Audit Process and Methodology

Audits are conducted by certified assessors affiliated with accreditation bodies and professional organizations such as American National Standards Institute and European Cooperation for Accreditation. The methodology uses documentation review, staff interviews, and technical inspections similar to audit processes at National Institute of Standards and Technology and European Central Bank IT audits. Evidence collection references archival practices from National Archives (France) and adheres to quality assurance techniques used by International Organization for Standardization committees and audit disciplines practiced by PricewaterhouseCoopers and Ernst & Young. Outcomes range from self-assessment checklists to formal external certification comparable to models at Underwriters Laboratories and Bureau Veritas.

Standards and Related Frameworks

The framework aligns with ISO 16363, ISO 14721 (OAIS), ISO 27001, and metadata schemas such as PREMIS, Dublin Core, and METS. It intersects with initiatives like Data Seal of Approval, CoreTrustSeal, and projects funded by the European Commission and Horizon 2020. Interoperability considerations reference efforts at Internet Engineering Task Force, World Wide Web Consortium, and preservation registries such as PRONOM and FAIR principles-related policy advocacy by organizations like Research Data Alliance and CODATA.

Implementation and Use Cases

Institutions implement the framework for repository selection by research infrastructures such as ELIXIR, CLARIN, and GRID. Use cases include scholarly publishing preservation at PubMed Central, scientific data stewardship at European Organization for Nuclear Research, and governmental record-keeping by National Archives and Records Administration. Universities including Columbia University and University of Toronto use assessments for repository improvement and compliance with funder mandates from Horizon Europe and national research councils. Cultural heritage digitization projects at Smithsonian Institution and Victoria and Albert Museum apply criteria to ensure long-term access.

Criticisms and Limitations

Critiques often cite the resource intensity of formal audits, observed in debates involving American Library Association and Association of Research Libraries, and the challenge of adapting criteria to small-scale repositories such as community archives or projects like Wikimedia Foundation initiatives. Others note potential overlap with certification schemes like CoreTrustSeal and tensions between prescriptive standards from International Organization for Standardization and flexible practices promoted by Open Knowledge Foundation. Questions also arise about scalability for national research infrastructures including CERN and the sustainability of assessor networks coordinated by bodies like European Cooperation for Accreditation and International Organization for Standardization committees.

Category:Digital preservation