KMS · Vault · Storage
Quantum-safe KMS, vault, and SSE-X storage
ML-KEM, ML-DSA, Falcon, and SLH-DSA across 14 algorithm families, with dual-provider cross-verification (liboqs + noble) and enforceable per-tenant crypto-policy tiers.
CUI Labs · Singapore
QNSP is the flagship post-quantum cryptography platform from CUI Labs — verifiable PQC infrastructure for AI, data, and mission-critical systems.
QNSP is built and operated by CUI Labs. For the company behind QNSP — corporate, legal, and registration details — see cuilabs.io.
Why QNSP exists
"Harvest now, decrypt later" is no longer a thought experiment. Adversaries are already collecting encrypted traffic they intend to break with cryptanalytically relevant quantum computers later this decade. Every long-lived secret encrypted with RSA, ECDH, or ECDSA today is on a clock — and the regulated industries that hold the most sensitive long-lived data (finance, defense, healthcare, government) have the least appetite for migration improvisation.
NIST finalised the first post-quantum standards in August 2024 — FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) — with FIPS 206 (FN-DSA) still in draft. The U.S. CNSA 2.0 suite sets a federal migration window across roughly 2030–2033. The work is no longer "discover PQC"; it is "deploy PQC verifiably, with evidence regulators and auditors can check."
That gap — between standards on paper and verifiable deployment — is QNSP.
One platform, four surfaces
A full managed post-quantum platform — not a single library or a point tool.
KMS · Vault · Storage
ML-KEM, ML-DSA, Falcon, and SLH-DSA across 14 algorithm families, with dual-provider cross-verification (liboqs + noble) and enforceable per-tenant crypto-policy tiers.
Hardware-backed keys
8 HSM vendors, AWS CloudHSM, customer-bring-your-own-HSM, and Intel SGX / AMD SEV / AWS Nitro Enclaves for AI workload isolation.
Audit · Compliance
A PQC-signed Merkle-tree audit trail and on-demand evidence packs for SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, PDPA, and MAS TRM.
Public verifiability
NIST ACVP conformance vectors (noble 435/435, liboqs 240/240 on the addressable ML-KEM surface) and reproducible benchmarks — open to inspection in the public mirror.
How we build it
Every claim QNSP's site makes — algorithm coverage, latency, conformance, hardware support — is verifiable from public artefacts. There are no demonstrations dressed up as features, no toy benchmarks, no filler pages. If a capability is on the roadmap it is labelled as such; if it ships, it ships with evidence.
The platform is built in TypeScript and Rust, runs on AWS in Singapore (ap-southeast-1), and is operated under regulated-buyer-grade engineering discipline: signed audit trails, immutable production change records, deterministic deploys, and no shortcuts on cryptographic correctness.
Verify it yourself: NIST ACVP conformance at /verify/conformance, reproducible benchmarks at /benchmarks, and the crypto path open for inspection in the public mirror at cuilabs/qnsp-public.
Who it's for
QNSP is built for financial institutions, defense contractors, healthcare systems, sovereign AI programmes, and critical-infrastructure operators across Asia, Europe, and North America — organisations whose data has to stay confidential long past the arrival of a quantum computer.
CUI Labs is headquartered in Singapore deliberately: it is one of the few jurisdictions with a coherent national posture on AI, cryptography, and financial infrastructure, and the MAS TRM Guidelines and PDPA give QNSP a regulatory baseline that maps cleanly onto the obligations its international customers face.
Get in touch
For more channels — compliance, billing, support, incident escalation — see the Contact page.
Sales
qnsp-sales@cuilabs.ioSecurity
qnsp-security@cuilabs.ioDeveloper relations
qnsp-devrel@cuilabs.ioGeneral
contact@cuilabs.ioSee the Contact page for all channels, or cuilabs.io for CUI Labs company, legal, and registration details.