Legal & Privacy

Infrastructure Security

• Built on a cloud platform with provider-held SOC 2 Type II and ISO 27001 certifications (Zoho Cloud).
• Data encrypted in transit using TLS 1.3.
• Data encrypted at rest using AES-256.
• Regular security assessments and vulnerability scanning of our own infrastructure.

Application Security

• Rate limiting and abuse prevention on all API endpoints.
• Input validation and sanitization on all user inputs.
• SSRF protection to prevent internal network access.
• No storage of credentials or sensitive authentication tokens.

Responsible Disclosure

If you discover a security vulnerability in our services, please report it to security@qtonicquantum.com. We aim to acknowledge valid reports within five business days and provide status updates as we investigate. These targets are aspirational and not contractual commitments.

1. Nature of Research

Qtonic Quantum Lab scores, rankings, and commentary constitute independent research opinions protected under the First Amendment of the United States Constitution. Published scores represent the output of automated analysis applied uniformly to all evaluated solutions. Scores are not endorsements, certifications, warranties, or guarantees of any product, service, or vendor. Qtonic Quantum has no obligation to any vendor regarding the outcome of its analysis.

2. Methodology

All solutions are evaluated using the same publicly disclosed methodology, applied without discrimination. The scoring methodology is documented at qtonicquantum.com/lab/methodology. Scores are computed across 10 published dimensions with expert oversight. Neither the methodology nor individual scores are influenced by vendor payments, sponsorships, or commercial relationships. The only way to improve a score is to improve the solution.

3. Data Sources

Analysis is based exclusively on publicly available information including open-source code repositories, published documentation, test vectors, NIST submissions, academic papers, and publicly accessible APIs. Qtonic Quantum Lab does not access proprietary source code, trade secrets, or confidential vendor materials unless explicitly provided by the vendor for evaluation.

4. Open Retest Policy

Any vendor, maintainer, or authorized representative may request a methodology retest of their solution at any time by contacting lab@qtonicquantum.com. New versions, patched vulnerabilities, updated certifications, and additional evidence are evaluated through the same automated evaluation process. Retest requests are processed under published review terms and without prejudice.

5. Independence

Qtonic Quantum Lab operates independently. No vendor pays for placement, ranking, or favorable treatment. There is no "pay-to-play" model. Commercial relationships between Qtonic Quantum and evaluated vendors (if any) do not influence Qtonic Quantum Lab scores. Scoring criteria are applied uniformly regardless of vendor size, market position, or relationship with Qtonic Quantum.

6. Accuracy & Limitations

Scores reflect the state of publicly available evidence at the time of evaluation. Results may change as solutions are updated, new evidence becomes available, or scoring methodology evolves. Qtonic Quantum does not guarantee that all relevant factors have been captured, that scores are errorless, or that rankings will remain static. Proprietary solutions for which source code is not publicly available may receive lower evidence classifications, which reflects the limitation of available evidence rather than a judgment on solution quality.

7. No Reliance

Qtonic Quantum Lab scores, rankings, and commentary are provided for informational purposes only. They should not be the sole basis for procurement decisions, vendor selection, compliance certifications, or security architecture choices. Organizations should conduct their own due diligence, including independent security assessments, before making technology decisions. Qtonic Quantum is not responsible for decisions made based on Qtonic Quantum Lab scores.

8. Limitation of Liability

Qtonic Quantum Lab scores and related content are provided "as is" without warranties of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. To the maximum extent permitted by law, Qtonic Quantum shall not be liable for any direct, indirect, incidental, consequential, special, or punitive damages arising from the publication, distribution, or use of Qtonic Quantum Lab scores, rankings, or commentary.

9. Trademarks

All product names, logos, and trademarks referenced in Qtonic Quantum Lab are the property of their respective owners. Use of these names is for identification and informational purposes only and does not imply endorsement by or affiliation with the trademark owners. "Qtonic Quantum Score," "Qtonic Quantum Lab," and "Qtonic Quantum" are trademarks of Qtonic Quantum Corp.

10. Dispute Resolution

Vendors who believe a score is inaccurate are encouraged to first use the methodology retest process. If a dispute remains unresolved after retest, the matter shall be governed by the laws of the State of Florida, United States, and resolved in the courts of Miami-Dade County, Florida. Before initiating legal action, the parties agree to a 30-day good-faith resolution period during which Qtonic Quantum will review the disputed score with fresh evidence provided by the vendor.