QuantovaQstampby Quantova
EN
EnglishEN日本語JAFilipinoFIL한국어KO简体中文ZHFrançaisFREspañolESУкраїнськаUK
GitHub Start building →
Qstamp / United States and Canada
Regulatory alignment · United States and Canada

Federal, state and sector obligations in the United States and Canada.

Federal post quantum mandates, record keeping rules for regulated industries, rules of evidence and a growing body of state AI law all depend on records whose integrity and time can be demonstrated. This page maps each to the mechanisms of the Qstamp family.

Post quantum migration

Federal post quantum mandates.

InstrumentRequirementHow the Qstamp family supports itDates
Executive Order 14412Post quantum key establishment and signatures for federal systems and contractorsSignatures under FIPS 204 across the family and the networkKeys by 31 December 2030, signatures by 31 December 2031
NIST IR 8547 (draft)Retirement of classical public key algorithmsNo classical public key algorithm is usedDeprecated 2030, disallowed 2035
National Security Memorandum 10Migration of federal systems to quantum resistant cryptographyRecords that need no future migration of their signaturesIssued May 2022
OMB Memorandum M 23 02Annual inventory of quantum vulnerable cryptography in federal agenciesA family with no quantum vulnerable algorithm to inventoryIssued November 2022
Quantum Computing Cybersecurity Preparedness ActMigration of federal information technology to post quantum cryptographyNIST standardised algorithms throughoutEnacted December 2022
Defence supply chain

Defence contractors and controlled information.

InstrumentRequirementHow the Qstamp family supports itDates
CMMC Program, 32 CFR Part 170Assessment of contractors against NIST SP 800 171 for controlled unclassified informationEvidence for the audit and accountability family of NIST SP 800 171Phased introduction from 2025
NIST SP 800 171 Revision 3Audit record generation, protection and reviewQLog hash chained logs with anchored checkpointsPublished May 2024
NIST SP 800 53 Revision 5AU 8, AU 9, AU 10, SI 7, SC 13 and SR 4See the national security alignment page for the full mappingCurrent
Records and evidence

Record keeping and evidence rules.

InstrumentRequirementHow the Qstamp family supports itDates
SEC Rule 17a 4Broker dealer records preserved in a manner that permits recreation of an original record if modified or deleted, or in non rewriteable formAnchored fingerprints that show whether a preserved record is the originalIn force
FINRA Rule 4511Books and records preserved in the format and media required by SEC Rule 17a 4As aboveIn force
21 CFR Part 11Secure, computer generated, time stamped audit trails for electronic records in regulated life sciencesQLog audit trails and signed records with anchored timesIn force
HIPAA Security Rule, 45 CFR 164.312Audit controls and integrity controls for electronic protected health informationIntegrity evidence without publishing any health informationIn force
Sarbanes Oxley Act, section 802Retention of audit records and penalties for their alteration or destructionDetection of altered or removed recordsIn force
Federal Rules of Evidence 902(13) and 902(14)Self authentication of electronic records and of data identified by hashHash based identification with a published verification procedureSince December 2017
Artificial intelligence

AI governance and transparency.

InstrumentRequirementHow the Qstamp family supports itDates
NIST AI Risk Management Framework and AI 600 1Govern, map, measure and manage functions, with a profile for generative AITraceable records of model versions, data sets and agent actionsJanuary 2023 and July 2024
California AI Transparency ActProvenance data embedded in AI content, detected by large platformsQTrace provenance anchored at the time of creationProviders 2 August 2026, platforms 1 January 2027
Colorado AI law (SB 26 189)Disclosure and transparency for automated decisions in consequential mattersSealed records of each automated decision and its inputsFrom 1 January 2027
Texas TRAIGADisclosure of AI use by agencies and healthcare providersDated records of disclosures and of AI useSince 1 January 2026
Canada

Federal obligations in Canada.

InstrumentRequirementHow the Qstamp family supports itDates
Federal post quantum migration roadmapMigration of federal systems, guided by the Canadian Centre for Cyber SecurityNIST standardised post quantum algorithms throughoutHigh risk systems by the end of 2031, all by 2035
Canada Evidence Act, sections 31.1 to 31.8Authentication of electronic documents and integrity of the system that recorded themIndependent evidence of the integrity of a record since sealingIn force
PIPEDASafeguards and limitation of personal informationOnly salted commitments leave the organisationIn force
Scope

How to read this page.

Dates and requirements reflect the published position as of October 2026. Qstamp supplies technical evidence of integrity, authorship and time that supports these duties. It does not by itself make any organisation compliant, and each organisation remains responsible for its own obligations.