Skip to content
BUILDS QUBITS
User DashboardOmni BoardStart Quantum Trial
// SECURITY

Post-quantum by construction.
Zero-trust by default.

BUILDS QUBITS runs on post-quantum cryptography, air-gapped enclaves, and zero-knowledge proofs of execution. Every claim we make about a circuit is anchored to a cryptographic proof : not to a vendor’s word.

NIST FIPS 203/204ENFORCED
ML-KEM · ML-DSA
ITAR AIR-GAPREADY
USML Cat. XI
SOC 2 TYPE IIATTESTED
AICPA TSC
ISO/IEC 27001IN PROGRESS
controls mapped
TLSML-KEM hybrid
ZKproofs on-chain
ENCLAVEair-gapped
AUDITappend-only
MOTION · REDUCED
// THREAT-MODEL

Six threats. Six controls.

Every threat in the model maps to a specific, testable control.

T-01CRITICAL
Circuit Exfiltration

Circuits are held in memory only and cryptographically erased before the response leaves the enclave. Zero bytes touch disk.

T-02CRITICAL
Quantum Adversary

All control-plane traffic uses ML-KEM hybrid TLS. Data-plane uses AES-256-GCM keyed from ML-KEM handshakes.

T-03HIGH
Vendor Breach

Per-tenant air-gapped enclaves. No shared tenancy. No cross-tenant egress. Each tenant has its own root of trust.

T-04HIGH
Insider Access

Every privileged action requires quorum approval and is written to the append-only, cryptographically signed audit log.

T-05MEDIUM
Supply-Chain Compromise

Every dependency is pinned, SBOM-signed, and verified at build time. Reproducible builds per release.

T-06MEDIUM
Denial of Service

Anycast ingress with per-tenant rate limits and a dedicated failover mesh. No single-tenant blast radius.

// DEFENSE-STACK

Five layers. One posture.

Each layer is independently observable and independently auditable.

01
Perimeter
Anycast edge · ML-KEM hybrid TLS · per-tenant rate limits · WAF at every PoP
02
Identity
SPIFFE workload identity · hardware-backed keys · quorum for privileged ops
03
Enclave
Air-gapped per-tenant execution · no shared tenancy · no cross-tenant egress
04
Execution
Ephemeral circuits · in-memory only · cryptographically erased post-measurement
05
Settlement
On-chain escrow · ZK execution proofs · immutable append-only audit trail
// COMPLIANCE

Compliance matrix

Every framework is a live control, not a badge on a page.

NIST FIPS 203
ML-KEM (Kyber)
ENFORCED
Post-quantum key encapsulation for all control-plane traffic.
NIST FIPS 204
ML-DSA (Dilithium)
ENFORCED
Post-quantum digital signatures for attestation and proofs.
ITAR · USML Cat. XI
Defense enclave
READY
Air-gapped enclave for defense-controlled workloads.
SOC 2 Type II
AICPA Trust Services
ATTESTED
Annual third-party audit of security, availability, and confidentiality.
ISO/IEC 27001
Information security
IN PROGRESS
Certification in progress; controls mapped to the SOC 2 audit.
GDPR · EU 2016/679
Data residency
ENFORCED
Data residency per tenant; zero cross-border egress by default.
FedRAMP High
NIST 800-53
MAPPED
Control set mapped; ATO pending for federal workloads.
// INCIDENT-RESPONSE

Incident response SLA

Committed response times, enforced by contract.

P0 · CRITICAL
< 15 MIN
Direct call to tenant CISO + BUILDS QUBITS CTO
P1 · HIGH
< 2 HR
Direct notification to tenant security contact
P2 · MEDIUM
< 24 HR
Status page + tenant dashboard
P3 · LOW
< 72 HR
Written report; no live notification required
// DISCLOSURE

Coordinated vulnerability disclosure

CONTACT
security@buildsqubits.com

If you believe you have found a security issue in a BUILDS QUBITS system, send us enough detail to reproduce it. We respond within 24 hours.

POLICY
  • 90-day coordinated disclosure window
  • Public credit unless you prefer anonymity
  • No legal action against good-faith research
  • Safe-harbor for research within scope

Request the full security dossier.

Available under NDA : includes SOC 2 Type II report, penetration test summary, and architecture diagrams.

Request dossier
● READY·platform: sovereignmotion: reduced · BUILDS QUBITS v3.0.0