Editing Evaluation Assurance Level (section)

=== EAL7: Formally verified design and tested<span class="anchor" id="EAL7"></span> ===

EAL7 is applicable to the development of security TOEs for application in extremely high risk situations and/or where the high value of the assets justifies the higher costs.

Practical application of EAL7 is currently limited to TOEs with tightly focused security functionality that is amenable to extensive formal analysis.
The ProvenCore OS, developed by ProvenRun, has been certified to EAL7 in 2019 by the [[ANSSI]].<ref name="ProvenCoreCertification">
{{ cite web |url=https://provenrun.com/wp-content/uploads/2021/09/ProvenCore-Certificat-CC-EAL7.pdf |archive-url=https://web.archive.org/web/20221204113622/https://provenrun.com/wp-content/uploads/2021/09/ProvenCore-Certificat-CC-EAL7.pdf | archive-date=2022-12-04 |title=Certifications ANSSI - ProvenCore }}
</ref>  The Tenix Interactive Link ''Data Diode Device,'' the Fox-IT ''Fox Data Diode'' (one-way data communications device) and the Arbit Cyber Defence Systems ''Data Diode 10GbE'' claimed to have been evaluated at EAL7 augmented (EAL7+).<ref>{{cite web |url=https://www.fox-it.com/en/certifications/ |url-status=dead |archive-url=https://web.archive.org/web/20200923095140/https://www.fox-it.com/en/certifications/ |archive-date=2020-09-23 |title=Certifications - Fox-IT}}</ref>