Did you read the emails, though? They certainly don't sound like simply asking about "where they are on the mDL standard". They are asking for NDAs to be signed - why is that necessary if this is just about the progress of implementing an ISO standard?
And there's this from CA:
> The agreement I've been provided goes beyond a POC and appears to create more of a long term relationship.