Compliance
QUANTRA is not a certification. It is an operating system for audits that map cleanly to the frameworks Indian regulators enforce. Reports are packaged in the language your examiner expects.
FIPS 203 · 204 · 205 · SP 800-131A
Scoring tables track ML-KEM (Kyber), ML-DSA (Dilithium), SLH-DSA (SPHINCS+) and the SP 800-131A deprecation schedule for RSA-2048 and ECC.
Master Direction on Cyber Resilience & DPSS
Report templates align with the RBI CSF domains most relevant to cryptographic estate: identify, protect, detect and respond.
Cybersecurity & Cyber Resilience Framework, 2024
QUANTRA reports map to the CSCRF control taxonomy for MIIs and regulated entities including RTAs, depositories and stockbrokers.
Information & Cyber Security Guidelines
Sector adaptations for insurers cover policy signing, e-KYC, BBPS and reinsurance data exchange surfaces.
CERT-In directions · DoT PQC advisories
QUANTRA operates within CERT-In's incident and log-retention framework and reflects DoT's PQC guidance for telecom operators.
Critical Information Infrastructure guidance
CII operators (power, telecom, transport) can produce NCIIPC-aligned crypto-risk views across IT and OT boundaries.
QUANTRA supports alignment with the frameworks above; it does not itself hold regulatory certifications and does not represent independent verification. Certifications remain the responsibility of the client organisation and its examiners.
Ask BWE for a scoped compliance mapping document.
Talk to a partner