Gov. Code, § 27392

(a) No electronic recording delivery system may become operational without system certification by the Attorney General. The certification shall affirm that the proposed county system conforms to this article and any regulations adopted pursuant to this article, that security testing has confirmed that the system is secure and that the proposed operating procedures are sufficient to assure the continuing security and lawful operation of that system. The certification may include any agreements between the county recorder and the Attorney General as to the operation of the system, including, but not limited to, the nature and frequency of computer security audits. Certification may be withdrawn for good cause.

(b) The Attorney General shall approve software and other services for electronic recording delivery systems pursuant to regulations adopted as described in paragraph (7) of subdivision (b) of Section 27393.