// LEGAL & REGULATORY COMPLIANCE

Privacy & Security Notice

EFFECTIVE DATE: 2026-01-01 | REGULATORY COMPLIANCE: SINGAPORE PDPA / AUSTRALIAN APPS / JAPAN APPI

⚠️ MANDATORY CLASSIFICATION WARNING

This public web endpoint is an UNCLASSIFIED communication interface. Do NOT submit state secrets, classified operational parameters, unreleased exploit code, or military-grade cryptographic keys through this web form. Initial vetting establishes verified, air-gapped or post-quantum encrypted channels for sensitive engagements.

[01] Scope & Purpose of Collection

Quantitative Technology Infrastructure & Threat Intelligence (QTI Systems) collects corporate and institutional contact details solely to evaluate strategic engineering inquiries, infrastructure vetting requests, and government defense partnerships across the APAC region.

We collect only the information provided voluntarily through our vetting interface:

Identity Data: Full name and institutional title.
Official Contact Channels: Verified corporate, government, or agency email addresses (public consumer webmails are rejected by protocol).
Entity Affiliation: Government department, defense enterprise, or critical infrastructure operator name.
Project Scope: Non-classified overview of requirements, timeline, or clearance level needed.
Technical Security Telemetry: Client IP address, request timestamp, and cryptographic CSRF tokens (processed strictly for fraud prevention, anti-abuse, and rate-limiting).

[02] Zero Commercial Exploitation & AI Non-Ingestion

As a sovereign defense and kernel-level infrastructure provider, our data boundaries are absolute:

No Third-Party Brokers

Your details are never rented, sold, or shared with commercial data aggregators, advertising platforms, or tracking networks.

Zero AI Model Training

No project scopes, organizational telemetry, or inquiry metadata are ever fed into public or third-party LLMs or generative AI systems.

[03] Cookie & Session Storage Policy

QTI Systems adheres to a strict zero-tracking architecture:

No Tracking Cookies: We do not deploy Google Analytics, Meta Pixels, ad-network cookies, or cross-site tracking beacons.
Strictly Necessary Technical Cookies: We only utilize a single, secure session cookie (PHPSESSID) with SameSite=Strict and HttpOnly flags to validate cryptographic anti-CSRF tokens and safeguard submission integrity. Under Singapore PDPA, Australian Privacy Principles, and EU ePrivacy, strictly necessary security cookies do not require invasive banner prompts.

[04] Data Retention & Sovereign Storage

All vetting transmissions are encrypted in transit via TLS 1.3 with post-quantum hybrid key encapsulation (ML-KEM-1024). Inquiries that do not meet clearance requirements or fail identity vetting are permanently expunged from memory within 30 days. Verified operational partner data is migrated to air-gapped or dedicated sovereign enclaves.

[05] Data Protection Officer (DPO) & Contact

For inquiries regarding regulatory compliance under the Singapore Personal Data Protection Act (PDPA), the Australian Privacy Act 1988, or to request record deletion:

Data Protection Officer (DPO)
QTI Systems Cyber Infrastructure
Email: [email protected] / [email protected]

← Return to Gateway REF: QTI-SEC-POL-2026.01