# Custom Data Policy Certifications

When building a global data policy, governors can [create custom certifications](../../how-to-guides/data-policy-tutorial#create-a-custom-certification-for-a-global-policy), which must then be acknowledged by data owners when the policy is applied to data sources.

For example, data governors could add a custom certification that states that data owners must verify that tags have been added correctly to their data sources before certifying the policy.

When a global data policy with a custom certification is cloned, the certification is also cloned. If the user who clones the policy and custom certification is not a governor, the policy will only be applied to data sources that user owns.

### Audit

The following events related to policy certification are [audited](../../../../detect-your-data/audit/reference-guides/index/uam-schema) and can be found on the [audit page in the UI](../../../../detect-your-data/audit/how-to-guides/use-immuta-audit):

* [DatasourcePolicyCertificationExpired](../../../../../detect-your-data/audit/reference-guides/index/uam-schema#datasourcepolicycertificationexpired-event): The global policy certification on a data source is expired.
* [DatasourcePolicyCertified](../../../../../detect-your-data/audit/reference-guides/index/uam-schema#datasourcepolicycertified-event): A global policy is certified for a data source.
* [DatasourcePolicyDecertified](../../../../../detect-your-data/audit/reference-guides/index/uam-schema#datasourcepolicydecertified-event): A global policy is decertified for a data source.
