Skip to main content
QCOS LedgerAdd-on

Compliance & Governance for Quantum Execution

Sealed, hash-chained evidence bundles. Tamper-evident audit trails. An evidence and audit layer for quantum execution.

From benchmark to verifiable evidence. Ledger doesn't measure anything — it protects the truth of what was measured.

SHA-256 Merkle SealEvidence export to support your auditsRequires QCOS Platform
Core Capabilities

Trust Infrastructure for Quantum

Every execution produces verifiable evidence. Every decision is auditable.

Evidence Bundles

Every quantum job execution produces a sealed, hash-chained bundle containing circuit hash, parameters, calibration snapshot, results, and full provenance chain.

SHA-256 content hashesSHA-256 Merkle root sealOffline verification with softquantus-verify

Cost Governance

Cost reporting is on the roadmap: budget limits, per-project chargeback reporting, and cost estimation before submission.

Budget limits (roadmap)Per-project chargeback reporting (roadmap)Pre-submit cost estimation (roadmap)

Audit Trail

Hash-chained record of every execution decision — who ran what, when, on which backend, and with what parameters. Tamper-evident by design.

Full job lifecycleUser attributionBackend selection rationale

Compliance Export

Export evidence bundles and audit logs in machine-readable form to support your own audits. SoftQuantus holds no SOC 2 or ISO 27001 certification. Human-verifiable.

Machine-readable exportOffline verificationAudit log export
Technical Specification

Evidence Bundle Format

Every execution produces a complete, self-contained evidence bundle.

evidence_bundle.json — Illustrative sample, not a real execution record
{
  "bundle_id": "QCOS-20260107-a1b2c3d4",
  "version": "1.0.0",
  "job_id": "job-7f3a9b2e1c8d",
  "tenant_id": "org_enterprise",
  
  "circuit_hash": "sha256:7f3a9b...",
  "parameters": {
    "shots": 4096,
    "backend": "example_backend",
    "optimization_level": 3
  },
  
  "calibration_snapshot": {
    "timestamp": "2026-01-07T10:30:00Z",
    "version": "cal_v2.3.1"
  },
  
  "results": {
    "counts": {"00": 2048, "11": 2048},
    "execution_time_ms": 1234
  },
  
  "provenance": {
    "submitted_by": "user@corp.com",
    "submitted_at": "2026-01-07T10:29:55Z",
    "scheduled_at": "2026-01-07T10:29:56Z",
    "executed_at": "2026-01-07T10:30:00Z"
  },
  
  "cost": {
    "estimated_usd": 0.45,
    "actual_usd": 0.42,
    "pricing_version": "2026-01"
  },
  
  "seal": {
    "algorithm": "SHA-256 Merkle root",
    "merkle_root": "sha256:...",
    "sealed_at": "2026-01-07T10:30:05Z"
  }
}
1

circuit_hash

SHA-256 of the quantum circuit definition

2

parameters

Job configuration and execution parameters

3

calibration_snapshot

Backend calibration state at execution time

4

results

Raw measurement outcomes and aggregated counts

5

provenance

Full chain: user → scheduler → backend → result

6

cost

Actual cost calculation with pricing breakdown

7

merkle_root

SHA-256 Merkle root sealing the bundle artifacts

Who Needs Ledger

Built for Regulated Environments

Government & Defense

Data-residency requirements and audit mandates. Every execution traceable, every result verifiable offline.

Pain point: Cannot use cloud quantum without audit trail

Regulated Industries

Financial services, healthcare, and critical infrastructure. Compliance is not optional — it's a prerequisite for quantum adoption.

Pain point: Auditors require proof of execution integrity

Enterprise Procurement

Large organizations with multi-vendor quantum strategies. Need independent verification of what they're paying for.

Pain point: No visibility into quantum spend by team/project

Research Institutions

Reproducibility requirements for peer review. Sealed evidence bundles can be verified offline with softquantus-verify.

Pain point: Cannot prove research reproducibility

Compliance

Export-Ready for Audits

Evidence exports are meant to support your own audits. SoftQuantus itself holds none of the certifications below.

SOC 2 Type II

Evidence export can support your own audit. SoftQuantus has not started a SOC 2 audit.

ISO 27001

Evidence export can support your own audit. SoftQuantus is not ISO 27001 certified.

GDPR

Built to GDPR requirements. A data processing agreement is available on request.

FedRAMP

Not held. FedRAMP authorisation does not exist for SoftQuantus.

Pricing

Enterprise Add-on

QCOS Ledger is available as an annual subscription for QCOS Enterprise customers.

Starting at

Contact Sales

Annual subscription

  • Evidence bundles per plan (see pricing)
  • Audit-log retention: 90 days
  • Audit evidence export
  • Support by email
Request Quote

Quantum execution you can prove

From benchmark to verifiable evidence.

Compliance & governance updates

Product updates and guidance on quantum evidence and governance.