Trust Center
Security and trust, in the open.
The Quantum Club is built for elite hiring under heavy regulatory scrutiny. This is the evidence — our compliance posture, where your data lives, how we protect it, and how our AI is governed.
Last updated Questions trust@thequantumclub.com
Statement of position
As of
- GDPRLive
- EU data residencyLive
- EU AI ActAligned
- SOC 2 (Type II)Aligned No independent attestation has been obtained yet.
- ISO/IEC 27001Aligned Formal certification not yet obtained.
- ISO/IEC 42001 (AI)Roadmap Certification not yet pursued; on the roadmap.
- Live implemented and in effect now.
- Aligned controls and posture meet the framework; no third-party attestation claimed.
- Roadmap committed, not yet started.
Answered in full
Security review FAQ
The questions enterprise security teams ask most often.
- Where is our data stored?
- In the European Union — AWS eu-west-1, via Supabase. EU residency is the default and there is no setting that moves core customer data outside the EU.
- Do you use our data to train AI models?
- No. Customer data is never used to train or fine-tune public AI models. Prompts sent to model providers are processed under contract and not used for training.
- Are you SOC 2 / ISO 27001 certified?
- Our controls are implemented to the SOC 2 Trust Services Criteria and map to ISO/IEC 27001. Independent attestation/certification is on our roadmap — we will publish each report and auditor here when complete, rather than imply a certificate we do not yet hold.
- How quickly are data breaches notified?
- Within 72 hours of becoming aware, in line with GDPR Article 33/34.
- Can we sign a DPA?
- Yes. Our Data Processing Agreement is available now from the Documents page, including the sub-processor list and EU transfer mechanisms (SCCs).
- Do you support SSO and SCIM?
- Yes — SAML 2.0 and OIDC single sign-on, plus SCIM 2.0 user provisioning and de-provisioning with audit logging.
Contents
Find the page your review needs
Each page says where things stand today and carries its own date. Where something is not in place yet, the page says so.
Where we stand
- ComplianceLast updated 6 frameworks: 2 live, 3 aligned, 1 roadmap
- SecurityLast updated 12 controls in 3 groups, resilience and vulnerability disclosure
- Data and privacyLast updated Where data is stored, how transfers are governed, and your rights
- AI governanceLast updated Training, human oversight, the EU AI Act and the model providers
Change notice
Hear about changes
Email trust@thequantumclub.com to be told when the Trust Center changes.