Your hosted marketplace can either be run publicly with its own domain and look and feel or internally with access limited by email domain, invite list, or IP address.
There are two types of audits that can be performed. A "Type I" audit is a review of controls and procedures. A "Type II" audit is a rigorous test of those controls and procedures over a 6-month timeframe. We're happy to say Logicworks undergoes and has passed a Type II audit.
How does this directly relate to us? Among other things, it means we have a service level agreement so our servers are patched on a timely basis, security bulletins are monitored and acted upon as necessary, log files are reviewed, and access to our servers is tightly controlled and monitored. It also means a high level of guaranteed "up-time", redundancy, and a comprehensive disaster recovery plan.