Our position on ISO/IEC 27001
Our information-security management maps to ISO/IEC 27001:2022 controls. Formal certification is planned; we will publish the certificate and scope statement once issued.
Last updated Last reviewed Questions trust@thequantumclub.com
At a glance
- State
- AlignedControls and posture meet the framework; no third-party attestation claimed.
- Certification
- Not obtainedFormal certification not yet obtained.
- Scope
- Information-security management for the Club OS platform, mapped to the ISO/IEC 27001:2022 Annex A controls.
The framework
What ISO/IEC 27001 is
ISO/IEC 27001:2022 is the international standard for an Information Security Management System (ISMS) and its Annex A controls.
In place2
- Security management mapped to the ISO/IEC 27001:2022 Annex A controls.
- Encryption in transit and at rest; access control via SSO/SCIM/MFA.
Not yet2
- ISMS mapped to 27001:2022 Annex A; certification planned.Questionnaire GRC-03, in the security questionnaire· Planned
- Code review, automated checks and dependency hygiene in place; a formally attested SDLC is part of the SOC 2 / ISO roadmap.Questionnaire AOS-09, in the security questionnaire· Partial
Security architecture
9 controls that map to ISO/IEC 27001
Grouped as on the Security page, where each control is described. The note under each names any other framework it supports.
Identity & access 4
- Passkey-first authenticationAlso SOC 2 (Type II)
- Enterprise SSOAlso SOC 2 (Type II)
- SCIM 2.0 provisioningAlso SOC 2 (Type II)
- MFA + step-up (AAL2)Also SOC 2 (Type II)
Data protection 4
- Encryption in transitAlso SOC 2 (Type II) · GDPR
- Encryption at restAlso SOC 2 (Type II) · GDPR
- Row-Level SecurityAlso SOC 2 (Type II)
- Secrets managementAlso SOC 2 (Type II)
Detection & resilience 1
- Audit loggingAlso SOC 2 (Type II)
What you'll receive
What you can rely on, and when
- Not yet
- Formal certification is planned. The certificate and scope statement will be published when issued.