QuantovaQstampby Quantova
EN
EnglishEN日本語JAFilipinoFIL한국어KOFrançaisFREspañolESУкраїнськаUK
GitHub Start building →
Qstamp / Japan
Regulatory alignment · Japan

Japan obligations for financial institutions, tax records, signatures and data.

The Financial Services Agency has asked financial institutions to prepare for post quantum cryptography, CRYPTREC guides the choice of algorithms, and Japanese law sets duties for electronic tax records, electronic signatures, payment instruments, security tokens and personal information. This page maps each to the mechanisms of the Qstamp family.

Post quantum migration

Financial Services Agency and CRYPTREC.

InstrumentRequirementHow the Qstamp family supports itDates
Financial Services Agency study group report on post quantum cryptographyInventory of cryptography and a transition plan for financial institutionsNIST standardised post quantum algorithms throughoutReport published 2024, migration in the early 2030s
CRYPTREC guidanceRecommended cryptographic algorithms and transition guidanceML DSA, ML KEM and SHA3 under the NIST standardsCurrent
Basic Act on Cybersecurity, Act No. 104 of 2014Cybersecurity of government and critical infrastructureIntegrity evidence for operational records and softwareIn force
Finance

Payment instruments and security tokens.

InstrumentRequirementHow the Qstamp family supports itDates
Payment Services Act, Act No. 59 of 2009Electronic payment instruments and their intermediariesSigned issuance records and anchored reserve attestationsStablecoin amendment in force June 2023
Financial Instruments and Exchange Act, Act No. 25 of 1948Electronically recorded transferable rightsAnchored register snapshots and prospectus versionsIn force
Records, signatures and data

Tax records, signatures and personal information.

InstrumentRequirementHow the Qstamp family supports itDates
Electronic Books Maintenance ActTime stamps or audit trails for electronically stored tax recordsSigned records with anchored times and QTax record chainsIn force
Act on Electronic Signatures and Certification BusinessLegal presumption for electronic signatures meeting its conditionsPost quantum signatures with a published verification procedureIn force
Act on the Protection of Personal Information, Act No. 57 of 2003Protection of personal information and security control measuresOnly salted commitments leave the organisationIn force
AI Promotion Act 2025Promotion of research, development and appropriate use of AITraceable records of AI systems and their outputsEnacted 2025
Checklist

Five steps for Japan.

Follow the Financial Services Agency report on the transition of financial institutions to post quantum cryptography.

Choose algorithms in line with CRYPTREC guidance and the NIST standards.

Keep time stamped tax records under the Electronic Books Maintenance Act with QTax.

Use electronic signatures with a published verification procedure under the Act on Electronic Signatures and Certification Business.

Issue electronic payment instruments and security tokens under the Payment Services Act and the Financial Instruments and Exchange Act.

Questions

Questions institutions ask.

What does the Financial Services Agency expect?

The Financial Services Agency has published a study group report that asks financial institutions to inventory their cryptography and plan the transition to post quantum cryptography, with priority systems migrated in the early 2030s.

Does Qstamp meet the Electronic Books Maintenance Act?

Qstamp provides time evidence and audit trails for electronically stored tax records. The taxpayer remains responsible for meeting the conditions of the Act.

Does any personal information leave our systems?

No. Only salted commitments are anchored, which supports the security control measures of the Act on the Protection of Personal Information.

Download the Japan guide (PDF) →Request a briefingQuantova regulatory framework
Scope

How to read this page.

Dates and requirements reflect the published position as of October 2026. Qstamp supplies technical evidence of integrity, authorship and time that supports these duties. It does not by itself make any organisation compliant, and each organisation remains responsible for its own obligations.