How do they ensure that server passes these requirements, especially 2 and 3?