they probably do not comply. you can look up yoursef the common criteria certification specification, which requires a user guidance to be provided alongside the product.
this guidance is usually under NDA and must be followed for the certification to be valid, and any operation outside of it is not tested by the certification