Partners will be accessing your systems through your APIs. Make sure those partners are compliant--get them certified. By whom? David Berlind says that's a complicated task worth outsourcing.