Information Security
ISO/IEC 27001:2022
Evaluated and aligned under ISO/IEC 27001:2022.
Official ISO referenceCompliance
Three standards, one operating posture
QNSI follows the company-wide HEOSSI framework standard for information security, AI governance and safety, and cryptographic module security.
AI Governance & Safety
ISO/IEC 42001:2023
Developed and maintained under ISO/IEC 42001:2023.
Official ISO referenceData Encryption Standards
ISO/IEC 19790:2025
Core cryptographic components verified under ISO/IEC 19790:2025.
Official ISO referenceEvidence boundary
The status is stated precisely
Internal framework posture; accredited certification and independent conformity assessment are not claimed.
HEOSSI (PTE.) LTD owns and administers the company compliance programme and is the prospective certificate holder. BEE, QNSI, and other HEOSSI offerings may be included within the documented organisational or technical scope; they are not separate certificate holders. ISO/IEC 19790 applies only to specifically identified cryptographic modules or components.
Tentative target: Q4 2026 or Q1 2027, subject to funding.The target is conditional planning information. It is not a certification promise, completion guarantee, or representation that an accredited conformity assessment has already occurred.
Scope
Legal and technical references remain separate
Privacy legislation, sector-specific customer obligations, NIST algorithm standards, and third-party assurance evidence remain documented where relevant. They are not additional HEOSSI compliance frameworks.
Does this page claim that HEOSSI or QNSI is ISO certified?
No. HEOSSI (PTE.) LTD owns and administers the programme and is the prospective certificate holder. QNSI is a HEOSSI product that may be included within the documented scope; it is not a separate certificate holder. ISO/IEC 19790 applies only to specifically identified cryptographic modules or components. Accredited certification and independent conformity assessment are not currently claimed.
What is the planned programme timeline?
The tentative target is Q4 2026 or Q1 2027, subject to funding. This is planning information, not a promised certification or completion date.
Why are privacy laws and customer regulations not listed as compliance frameworks?
Applicable laws and customer-specific regulatory duties still apply and are documented in the relevant legal, privacy, security, and contractual materials. They are not presented as additional HEOSSI compliance frameworks.