# The Quantum Club — Trust & Compliance

> The trust, security and compliance posture for The Quantum Club platform, at https://trust.thequantumclub.com.

## Trust surfaces

- [Trust Center](https://trust.thequantumclub.com/): Compliance posture, sub-processors, data residency, security architecture, and AI governance.
- [Trust summary API](https://trust.thequantumclub.com/api/v1/trust/summary): Machine-readable compliance + posture snapshot (JSON).
- [Sub-processors API](https://trust.thequantumclub.com/api/v1/trust/subprocessors): Machine-readable sub-processor list (JSON).
- [security.txt](https://trust.thequantumclub.com/.well-known/security.txt): Coordinated vulnerability disclosure contact (RFC 9116).

## Posture (summary)

- Data residency: European Union (AWS eu-west-1, via Supabase).
- AI training on customer data: never.
- Breach notification: within 72 hours (GDPR).
- Identity: passkeys, SSO (SAML 2.0 / OIDC), SCIM 2.0, MFA with step-up.

## Ecosystem

- [The Quantum Club](https://thequantumclub.com/): The brand and membership landing.
- [Club OS](https://os.thequantumclub.com/): The member and partner application.
- [Documentation](https://docs.thequantumclub.com/): Platform guides, security model, and API reference.
- [System Status](https://status.thequantumclub.com/): Live operational status.