Procurement Pack
Everything your procurement, security, and legal teams need to evaluate QCOS. Download technical documentation or request a custom briefing.
Technical Documentation
Download detailed documentation for your evaluation process
Executive Summary
One-page overview of QCOS value proposition for C-suite
Security Architecture
Detailed security model, data flow, and compliance certifications
Deployment Options
Cloud, self-hosted, and air-gapped deployment architectures
RBAC & Audit Logging
Role-based access control, audit logs, and export formats
Integration Checklist
SSO, API, CI/CD, and observability integration requirements
Pricing & Licensing
Detailed pricing tiers, volume discounts, and licensing terms
Compliance & Certifications
QCOS maintains industry-standard certifications for enterprise security requirements
SOC 2 Type II
Valid until: Dec 2026
Security, availability, and confidentiality controls audited annually
ISO 27001
Valid until: Mar 2027
Information security management system certification
GDPR
Valid until: Ongoing
EU data protection regulation compliance with DPA available
HIPAA
Valid until: On Request
Business Associate Agreement for healthcare customers
Certification reports available under NDA. Request access →
Security Features
Enterprise-grade security built into every layer
Data Protection
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Customer-managed encryption keys (BYOK)
- Data residency controls (EU, US, APAC)
Access Control
- SAML 2.0 / OIDC SSO integration
- Role-based access control (RBAC)
- Multi-factor authentication (MFA)
- API key rotation and expiry
Audit & Compliance
- Immutable audit logs (90-day retention)
- Export to SIEM (Splunk, Datadog, etc.)
- Evidence bundles with cryptographic signatures
- Chargeback tags for FinOps
Infrastructure
- SOC 2-aligned data center controls
- Geographic redundancy (multi-region)
- DDoS protection and WAF
- Penetration testing (annual)
Deployment Options
Choose the deployment model that fits your requirements
QCOS Cloud
Fully managed SaaS platform
- Zero infrastructure management
- Automatic updates and scaling
- 99.9% SLA uptime guarantee
- 24/7 enterprise support
Best for: Teams wanting fastest time-to-value
Self-Hosted
Deploy in your own infrastructure
- Kubernetes or VM deployment
- Full data sovereignty
- Custom network policies
- Bring your own monitoring
Best for: Organizations with strict data residency requirements
Air-Gapped (QuantumLock)
Offline enforcement for HPC/classified
- No network dependency
- Cryptographic license tokens
- Periodic sync for updates
- FIPS 140-2 compliant option
Best for: Government, defense, and classified environments
Request Custom Procurement Brief
Get a tailored brief for your organization with specific compliance requirements, pricing, and technical architecture recommendations.
Ready to evaluate?
Request a technical deep-dive with our solutions team