Content removal “certifications” prove nothing: what to check instead

01What the badges actually are

Search for help removing a video or a damaging post and the first pages look alike. A portrait of the founder, a row of logos, and a line such as “certified online reputation specialist” or “accredited removal expert”. Some firms add a trade association seal, review-site stars and “as featured in” press logos.

Each of those is issued by a private body to whoever completes its course or pays its fee. A course certificate tells you that the holder finished that body’s course to that body’s standard. It does not tell you what the course covered, who wrote it, whether it touched the site where your material sits, or whether the holder has filed one successful request since.

Think of it as a scout badge. It may mean something inside the organisation that awarded it. It says nothing about whether this person can get a video off an offshore tube site this week, or a result out of Google Search by the end of the month.

Why badges at all? Because the person reading is usually in a hurry and new to this. A word like “certified” looks like expertise to someone who has never had to file a takedown. A firm with a method and results to show tends to lead with those; the badge usually fills the space where an explanation should be.

02Who the law says may file

The routes that actually remove content say who may use them. Not one of them asks for a qualification. They ask for authority to act and for enough information to find and assess the material.

Read the middle column again. What a provider needs from you is a signed authorisation that names what it may file and for which URLs. A provider that starts with its credentials and never mentions your authorisation has the order of things backwards.

The copyright route also shows why authority is taken seriously: the sender swears, under penalty of perjury, to being authorised. A certificate adds nothing to that statement, and an unauthorised sender cannot make it truthfully.

So the first document a serious provider sends you is not a brochure. It is an authorisation for you to sign, naming the provider, the URLs or search terms covered and the period, so that every request it files can be traced back to your consent.

03What actually decides a removal

The recipient decides on the request, not on the requester. It asks four things. Is the ground one it acts on: copyright, a non-consensual intimate image, exposed personal information, a breach of its own rules. Is the material identified precisely. Is the evidence there. And is the request going to the party that can act: the platform, the hosting provider, the registrar or the search engine.

A refused request is not fixed by a better badge. It is fixed by reading the reason for refusal, changing the ground or the evidence, or going one level up the chain to the host. That is where results are made, and none of it is examined by any certificate on the market.

• Finding the copies. The URLs you know are a fraction of what is up. See finding every copy of a leaked image or video.
• Choosing the ground for each URL. The same clip can be filed as copyright, as an intimate image or under a platform rule, and the outcome differs.
• Handling refusals with new evidence or a different recipient, instead of resending the same text.
• Verifying that the page is gone on a stated date, and reporting what remains.

None of these four skills is tested by any certificate sold in this field, and all four can be checked: by the list of URLs found, the ground named for each, the refusals answered and a dated recheck.

Google’s own policy says something about this market. It will consider removing results from sites that require payment to the site or to other agencies to take content down. Paying for removal has its own abuse category for a reason.

04The one official status: trusted flagger

In the EU, the Digital Services Act created one status that is official and close to this work: the trusted flagger. It is awarded by the Digital Services Coordinator of the member state where the applicant is established, after an application.

The conditions are particular expertise in detecting and notifying illegal content, independence from any online platform, and diligent, accurate and objective notices. Only EU-based entities can apply. The European Commission publishes the list, searchable by country and area of expertise.

What the status buys is priority: platforms must handle these notices first and decide as quickly as possible. The platform still makes the decision. So even the one real badge in this field is a queue position, not a removal power.

That makes the claim easy to test. A firm calling itself a trusted flagger is on the Commission’s list for a stated area, or it is not. SARAZIM LLC is not a trusted flagger and, as a company established outside the EU, cannot apply. Its notices go through the ordinary channel, like yours would.

The same test works for any firm outside the EU that cites the status: it should be able to name the member state whose coordinator awarded it, and the entry should be on the list.

05Where a non-lawyer has to stop

A content removal provider is not a law firm, and the law draws the line in different places in each country.

In England and Wales, the Legal Services Act 2007 lists six reserved legal activities: rights of audience, the conduct of litigation, reserved instrument activities, probate, notarial activities and the administration of oaths. Carrying one on without being entitled is a criminal offence. Filing a platform report, a search-engine request or a copyright notice is not on that list. Starting or running a court claim is.

In the United States, the practice of law is defined state by state; the ABA’s own commentary says the definition is established by law and varies from one jurisdiction to another. Whatever the state, anything that needs a court belongs with a lawyer admitted there.

A provider that promises to “take legal action” or to unmask the uploader itself is describing work it cannot lawfully do or a lawyer it has not named. For how identification really works, see identifying an anonymous poster or uploader.

Ask early which tasks the provider will hand to a lawyer, and at what point. Letters sent in your name by someone who cannot advise you commit you to positions you did not choose, and the time lost on the wrong route is not recoverable.

06Claims you can check, and claims you cannot

Sort every claim on a provider’s site into two piles: the ones an outside register can confirm, and the rest.

Misusing a badge is not only unpersuasive. In the UK, displaying a trust mark or quality mark without authorisation, and falsely claiming approval by a public or private body, are on the list of commercial practices banned outright. In the US, the FTC requires advertising to be truthful and claims to be backed by evidence.

When a provider mentions a partner law firm, ask for its name and check it yourself. A referral to a named firm is normal; an unnamed “legal team” is not something anyone can verify.

07What actually proves capability

Five things tell you more than any certificate. Each one is a document or an answer you can hold the provider to.

Listen for the answers that end the conversation: “that is our proprietary method”, “everything was removed” with no list behind it, or payment before any contract. Each means there is nothing to check. More on contracts and refusals in how to choose a content removal service.

08The report that should come back

The result report is the only evidence that work was done. It should let you open every link yourself and see the same thing the provider saw.

• Each URL, as filed.
• The ground used and the party it went to.
• The date filed and the reference number returned.
• The outcome: removed, delisted, refused, or pending.
• The date the URL was checked again, and by what method.
• What remains open, and why.

“Removed” should mean the URL returned nothing when checked again on a stated date, not that a request was sent. A delisting means Google stopped showing the link, while the page may still exist; Google states that removal from results does not remove the content from the web. A report that blurs the two is hiding the difference.

Ask to see a sample before you sign. Providers that produce real reports have one to show with the client details removed. Providers that do not will offer a screenshot of a single success.

09What SARAZIM LLC is, and is not

SARAZIM LLC is a Korean company that finds and files. It locates copies, classifies each URL, files with platforms, hosts and search engines on your written authorisation, handles refusals, monitors for re-uploads each cycle and reports every URL and its outcome.

It is not a law firm. It does not practise law in any country, does not give legal advice, does not represent anyone in court and is not a trusted flagger. When a matter needs a court, it says so and the work goes to a lawyer you instruct.

Detection works from two or three reference photographs, using face recognition to find copies that were never captioned with a name. Monitoring runs on metadata and hash values; SARAZIM LLC keeps no footage, and personal data is destroyed after the work is complete under its terms of service.

The founder is a security professional, formerly of Palo Alto Networks, and holds CISSP, CISM, CEH, OSCP and GIAC GASAE. These are security credentials issued against exams by bodies that set their own requirements; CISSP alone requires five years of work experience. They speak to how data and systems are handled. They are not removal qualifications, and SARAZIM LLC does not present them as such.

What it will not do is as much part of the offer as what it does. It does not promise a result, does not threaten anyone on your behalf and does not take money for a court step it cannot take.

10If your provider leads with a certificate

A badge on the homepage does not make a firm bad. It makes the next questions more important. Put the certificate aside and ask:

1. For one of my URLs, which party will you file with, and on what ground?
2. Can I see a redacted result report from an earlier case?
3. In whose name is each request signed?
4. What will you hold about me, and when is it deleted?
5. What happens, and what do I pay, if a URL stays up?

If the answers are specific and come in writing, judge the firm on them. If every answer circles back to the certificate or the association, that piece of paper is probably all there is. You can also file many of these requests yourself; see paying for removal or filing it yourself.

If you have already paid and the provider will not answer, ask in writing for the list of URLs filed and the references returned. That list is yours, and whoever takes over the case will need it.