Legal and Trust Center
The documents that govern QNSI, explain our data practices, and state our security and operational commitments.
HEOSSI (PTE.) LTD is incorporated in Singapore. QNSI is offered internationally subject to applicable law. Mandatory privacy, consumer, sanctions, export-control, and sector-specific rules continue to apply regardless of contractual choice of Singapore law.
Terms of Service
The contract governing use of QNSI.
Privacy Policy
How HEOSSI handles personal data as controller.
Data Processing Addendum
Processor terms for Customer Data.
Cookie Policy
Cookies, analytics, and consent controls.
Controller Identity and Data Protection Officer
Who the data controller legally is, its Singapore UEN, and the designated Data Protection Officer's business contact — as required by the PDPA and GDPR.
Sub-processors
The current, complete list of third parties that process Customer Data on QNSI's behalf, their purpose, region, and cross-border transfer mechanism.
Export Control and Sanctions
QNSI is offered internationally, subject to applicable export-control, sanctions, end-use, and licensing requirements.
Governing Law and Dispute Resolution
QNSI contracts are governed by Singapore law. Disputes are resolved by arbitration in Singapore under the SIAC Rules — a neutral, globally enforceable forum.
Acceptable Use Policy
What you may not do with QNSI Cloud — and what happens if you do. Applies to every plan, including the free tier.
Vulnerability Disclosure Policy
How to report a security vulnerability in QNSI, what we commit to in return, and the safe harbour that protects good-faith research.
AI and Customer Data
Whether QNSI trains models on your data (it does not), how customer AI workloads are isolated, and what leaves the enclave.
Data Retention and Deletion
How long QNSI keeps each class of data, what happens when you delete something or close your account, and the limits of deletion in a tamper-evident system.
Incident Response and Breach Notification
How QNSI detects, contains, and communicates a security incident — including the notification timelines we commit to.
Business Continuity and Disaster Recovery
How QNSI is architected to survive failure, how we recover, and what we do not yet promise.
Accessibility Statement
QNSI's accessibility commitment, the standard we build to, known gaps, and how to report a barrier.
Billing, Renewal, Cancellation, and Refund Policy
How subscriptions renew, how cancellation works, when fees or credits may be refunded, and what happens to data after a downgrade or termination.
Customer Security Responsibilities
The shared-responsibility boundary for accounts, keys, applications, users, integrations, and regulated workloads.
Support and Maintenance Policy
Support scope, severity handling, maintenance notices, and the difference between response targets and contractual guarantees.
Service Level Agreement
Availability measurement, exclusions, service credits, claim procedure, and the plans eligible for contractual SLA coverage.
Government and Law-Enforcement Request Policy
How HEOSSI evaluates legal demands for customer information and when customers are notified.
Intellectual Property Complaint Policy
How rights holders can report alleged infringement and how customers can respond.
Marketing Communications Policy
Consent, identification, opt-out, and Singapore Do Not Call requirements for QNSI marketing.
Anti-Bribery, Anti-Corruption and Modern Slavery
HEOSSI's business-conduct commitments — the ones enterprise and government procurement will ask you to evidence.