I am not trying to be an a$$ here but certified can mean they applied for a vendors license, in some states you don't even have to do that to be considered certified. He shredded them which is completely compliant for all privacy laws.