Capability and release material
Supported operating surfaces, release information, product guidance and evaluation artefacts.
Trust centre
Security, privacy and procurement information in one place.
The QES Trust Centre gives customers, evaluators and partners a clear route to public security resources and controlled due-diligence material.
Public resources
Start with the information relevant to your role.
These permanent pages are designed to support executive review, security assessment, responsible research and procurement preparation.
Security
Security overview
QES security principles, cryptographic direction, lifecycle and disclosure model.
Open security ArchitecturePublic architecture overview
High-level control layers, operating model, deployment surfaces and shared responsibilities.
Open architecture ReportingVulnerability disclosure
How researchers and customers can report a suspected security issue responsibly.
Open policy NoticesSecurity advisories
The authoritative public register for customer-relevant QES security notices.
Open advisories AssuranceIndependent review
How QES approaches evidence, specialist assessment and controlled report access.
Open assurance PrivacyWebsite privacy
How information submitted through the QES public website is handled.
Open privacyClaims and evidence
Trust depends on scope, not slogans.
QES represents a capability, certification, assessment or review only when the underlying evidence applies to the product, release and scope being discussed.
Where evidence cannot be published safely, qualified evaluators may review applicable material through a controlled process. Where an assessment is time-bound or release-specific, that limitation remains attached to the claim.
- Product claims are tied to defined capability
- Assessment claims identify applicable scope
- Sensitive evidence is access-controlled
- Material changes are considered during reliance
Controlled due-diligence room
Deeper material for qualified customer and government review.
The exact evidence set depends on the decision, deployment scope, release and contractual arrangements. Availability is confirmed during the engagement.
Technical due diligence
Controlled architecture, implementation, hardening and security-review material relevant to the evaluation.
Service and support information
Deployment responsibilities, software lifecycle, support model, response channels and operational procedures.
Procurement documentation
Applicable agreements, data-protection terms, service commitments, pricing and engagement scope.
Procurement pathway
Move from interest to an evidence-backed decision.
QES can structure the review for an executive sponsor, security architecture team, procurement function, risk committee or independent assessor.
Executive briefing
Understand the problem QES addresses, the operating model and the potential organisational fit.
Confidential technical session
Review deeper product and security information with the appropriately qualified stakeholders.
Controlled evaluation
Test QES against representative workflows, success criteria and operating constraints.
Commercial and assurance closeout
Confirm scope, responsibilities, evidence, support, terms and deployment plan.
Security enquiries: Send responsible security reports to contact@qesencryption.com with the subject “QES Security Report”. For procurement or assurance access, use the confidential briefing form.
Due diligence
Tell us who is evaluating QES and what decision they must make.
We will align the briefing, evidence and confidentiality controls to the role and scope.