Self-assertions of compliance can be legitimate. To appear on that list they'd need third-party validation of their compliance, which is not the same thing.
But even if they're legally not doing a fraud here due to specific word choice, they're not being wholly honest with their customers. And that sucks.