Qstamp / Japan
Regulatory alignment · Japan

Japan obligations for financial institutions, tax records, signatures and data.

The Financial Services Agency has asked financial institutions to prepare for post quantum cryptography, CRYPTREC guides the choice of algorithms, and Japanese law sets duties for electronic tax records, electronic signatures, payment instruments, security tokens and personal information. This page maps each to the mechanisms of the Qstamp family.

Migración poscuántica

Financial Services Agency and CRYPTREC.

InstrumentoRequisitoCómo la familia Qstamp lo respaldaFechas
Financial Services Agency study group report on post quantum cryptographyInventory of cryptography and a transition plan for financial institutionsAlgoritmos poscuánticos estandarizados por el NIST en todo el sistemaReport published 2024, migration in the early 2030s
CRYPTREC guidanceRecommended cryptographic algorithms and transition guidanceML DSA, ML KEM and SHA3 under the NIST standardsVigente
Basic Act on Cybersecurity, Act No. 104 of 2014Cybersecurity of government and critical infrastructureEvidencia de integridad para los registros operativos y el softwareEn vigor
Finance

Payment instruments and security tokens.

InstrumentoRequisitoCómo la familia Qstamp lo respaldaFechas
Payment Services Act, Act No. 59 of 2009Electronic payment instruments and their intermediariesSigned issuance records and anchored reserve attestationsStablecoin amendment in force June 2023
Financial Instruments and Exchange Act, Act No. 25 of 1948Electronically recorded transferable rightsAnchored register snapshots and prospectus versionsEn vigor
Records, signatures and data

Tax records, signatures and personal information.

InstrumentoRequisitoCómo la familia Qstamp lo respaldaFechas
Electronic Books Maintenance ActSellos de tiempo o registros de auditoría para los registros fiscales almacenados electrónicamenteRegistros firmados con marcas de tiempo ancladas y cadenas de registros de QTaxEn vigor
Act on Electronic Signatures and Certification BusinessPresunción legal para las firmas electrónicas que cumplen sus condicionesFirmas poscuánticas con un procedimiento de verificación publicadoEn vigor
Act on the Protection of Personal Information, Act No. 57 of 2003Protección de la información personal y medidas de control de seguridadSolo los compromisos criptográficos con sal salen de la organizaciónEn vigor
AI Promotion Act 2025Promoción de la investigación, el desarrollo y el uso adecuado de la IARegistros trazables de los sistemas de IA y de sus resultadosPromulgada en 2025
Checklist

Five steps for Japan.

Follow the Financial Services Agency report on the transition of financial institutions to post quantum cryptography.

Choose algorithms in line with CRYPTREC guidance and the NIST standards.

Keep time stamped tax records under the Electronic Books Maintenance Act with QTax.

Use electronic signatures with a published verification procedure under the Act on Electronic Signatures and Certification Business.

Issue electronic payment instruments and security tokens under the Payment Services Act and the Financial Instruments and Exchange Act.

Preguntas

Questions institutions ask.

What does the Financial Services Agency expect?

The Financial Services Agency has published a study group report that asks financial institutions to inventory their cryptography and plan the transition to post quantum cryptography, with priority systems migrated in the early 2030s.

Does Qstamp meet the Electronic Books Maintenance Act?

Qstamp provides time evidence and audit trails for electronically stored tax records. The taxpayer remains responsible for meeting the conditions of the Act.

Does any personal information leave our systems?

No. Only salted commitments are anchored, which supports the security control measures of the Act on the Protection of Personal Information.

Alcance

Cómo leer esta página.

Las fechas y los requisitos reflejan la posición publicada a octubre de 2026. Qstamp aporta evidencia técnica de integridad, autoría y tiempo que respalda estas obligaciones. Por sí sola no hace que ninguna organización cumpla la normativa, y cada organización sigue siendo responsable de sus propias obligaciones.