Export Control Notice

Important information regarding export control regulations for HEOSSI solutions and services

Last Updated: July 13, 2026

Compliance required

Compliance Required

HEOSSI solutions contain cryptographic technology and quantum-safe security features that may be subject to export controls, including controls on intangible technology transfers. HEOSSI and each user remain responsible for the legal obligations placed directly on them; customer responsibility does not transfer HEOSSI's statutory duties.

Overview

HEOSSI develops and distributes cryptographic software, quantum-safe security solutions, and related technologies that may be subject to export control laws and regulations, including but not limited to:

  • Singapore Strategic Goods (Control) Act (SGCA), administered by Singapore Customs under the Ministry of Trade and Industry
  • U.S. Export Administration Regulations (EAR), administered by the Bureau of Industry and Security (BIS)
  • International Traffic in Arms Regulations (ITAR), administered by the U.S. Department of State
  • Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies
  • Local export control laws in your jurisdiction

Controlled Solutions

The following HEOSSI solutions and technologies may be subject to export controls:

Cryptographic Software

QNSI (Quantum-Native Security Infrastructure), QSIG (Quantum Secure Interoperable Grid), and other solutions implementing post-quantum cryptography (PQC), including CRYSTALS-Kyber, CRYSTALS-Dilithium, SPHINCS+, and related algorithms.

Quantum-Safe Networking

Tunnel, quantum key distribution (QKD) integration software, and quantum-resistant connectivity and VPN solutions.

Technical Documentation

Technical specifications, implementation guides, cryptographic design documents, and source code related to controlled solutions.

User Obligations

By accessing, downloading, or using HEOSSI solutions, you acknowledge and agree to the following:

1

Geographic Restrictions

You will not access, supply, transfer, release, or make available a solution where prohibited by applicable sanctions, territorial controls, licence conditions, end-user restrictions, or end-use controls. Restricted countries and regions change; no static list on this page is authoritative.

2

Restricted Party Lists

You are not listed on any U.S. Government list of prohibited or restricted parties, including the Treasury Department's Specially Designated Nationals List, the Commerce Department's Denied Persons List, Entity List, or Unverified List.

3

Prohibited End Uses

You will not use HEOSSI solutions in connection with the design, development, production, stockpiling, delivery, or use of nuclear, chemical, or biological weapons or related missile systems. Any other controlled military, intelligence, surveillance, nuclear, or dual-use activity requires HEOSSI's prior written approval and every permit required by Singapore and other applicable law.

4

Re-Export Compliance

You will comply with all applicable export and re-export control laws and regulations when transferring HEOSSI solutions to third parties or across international borders.

License Exceptions and Exemptions

Certain HEOSSI solutions may qualify for license exceptions under the EAR, including:

TSU (Technology and Software - Unrestricted)

Publicly available encryption source code and object code software may qualify for TSU exception, subject to notification requirements to BIS and NSA.

Reference: 15 CFR § 740.13(e)

ENC (Encryption)

Certain encryption items may be exported under License Exception ENC after classification review and self-classification reporting.

Reference: 15 CFR § 740.17

Important: License exceptions have specific requirements and limitations. Consult with export compliance counsel to determine applicability.

Export Classification

HEOSSI solutions are generally classified under the following Export Control Classification Numbers (ECCNs):

5D002

Information Security Software

Software for the development, production, or use of encryption items, including post-quantum cryptographic implementations.

5A002

Information Security Systems

Systems, equipment, and components for information security, including quantum key distribution systems.

Classification determinations are subject to change based on solution updates and regulatory changes. Contact compliance@heossi.com for current classification information.

Disclaimer

This Export Control Notice is provided for informational purposes only and does not constitute legal advice. Export control laws are complex and subject to change. Users are solely responsible for determining the applicability of export control laws to their specific use case and obtaining any required licenses or authorizations. HEOSSI makes no representations or warranties regarding the accuracy or completeness of this information. For specific guidance, consult with qualified export control counsel.

Contact Information

For questions regarding export control compliance:

Export Compliance Team
Email: compliance@heossi.com
Address: 552 Ang Mo Kio Avenue 10, Singapore 560552

Additional Resources