Secure data facilities for research are becoming common but they are still fairly rare. Whilst there is increased sharing of experiences in running such facilities, this is still unsystematic. Accreditation of such facilities often focuses on security rather than efficiency and effectiveness, limiting the opportunities to learn from good practices elsewhere. Over the last ten years, my team has become increasingly involved with carrying out reviews of secure facilities, formally and informally. In this presentation, I summarise our experience to date, and consider whether we should try to expand this community review process - and how.