Compliance
HEOSSI (PTE.) LTD owns and administers the company compliance programme and is the prospective certificate holder. QNSI is a HEOSSI product and may be included within the documented organisational or technical scope; it is not a separate certificate holder.
HEOSSI (PTE.) LTD owns and administers the company compliance programme and is the prospective certificate holder. QNSI is a HEOSSI product and may be included within the documented organisational or technical scope; it is not a separate certificate holder.
| Area | Standard | Posture |
|---|---|---|
| Information Security | ISO/IEC 27001:2022 | Evaluated and aligned under ISO/IEC 27001:2022. |
| AI Governance & Safety | ISO/IEC 42001:2023 | Developed and maintained under ISO/IEC 42001:2023. |
| Data Encryption Standards | ISO/IEC 19790:2025 | Core cryptographic components verified under ISO/IEC 19790:2025. |
These statements describe internal evaluation, alignment, development, maintenance, and verification. They do not claim accredited certification or an independent conformity assessment.
ISO/IEC 27001 and ISO/IEC 42001 apply to HEOSSI's defined management-system scope. ISO/IEC 19790 applies only to specifically identified cryptographic modules or components, not to HEOSSI or QNSI generally.
Tentative programme target: Q4 2026 or Q1 2027, subject to funding. This is planning information, not a promised certification or completion date.
Applicable privacy laws, sector-specific customer requirements, NIST algorithm standards, and third-party assurance evidence remain documented in the relevant legal and technical material. They are not additional HEOSSI compliance frameworks.
Reports
Authenticated report endpoints expose readiness reports for:
iso27001iso42001iso19790
Reports default to NOT VERIFIED unless protected evidence independently
supports a narrower claim. Operational health is reported separately and does
not prove control effectiveness or conformity.
Shared responsibility
| Control area | QNSI | Customer |
|---|---|---|
| Infrastructure and platform security | Responsible | Informed |
| Application and workload security | Shared | Responsible |
| Data classification | Supports controls | Responsible |
| Identity and access configuration | Shared | Responsible |
| Evidence review and legal applicability | Provides scoped evidence | Responsible |
Official references
HEOSSI (PTE.) LTD
UEN: 202532790K