Commitments, not certifications

How to read this page

Established tolling vendors publish certifications that took years to obtain. Quantum Mobility is new — we don't have those yet. What we do have is an architecture designed to meet these standards, and explicit commitments about what we will formally certify against, and when.

The three statuses below are honest:

Supported — the architecture natively supports this today, demonstrable in a pilot environment.

Committed — written into our engineering roadmap; committed to achieve during first production deployment.

Planned — on the longer-term roadmap; will be addressed as we scale into relevant markets.

Transport & Tolling Standards

The standards that enable multi-operator interoperability, cross-border tolling, and cross-system coordination.

ISO 17573-1:2019 Electronic Fee Collection — Architecture

The international reference architecture for electronic fee collection systems. Our architectural model maps directly to this standard.

Supported

EETS European Electronic Toll Service (Directive 2019/520)

The European framework for cross-border tolling interoperability. Our coordination model is compatible with the EETS provider-to-authority structure.

Committed

ISO 14906 Electronic Fee Collection — DSRC Application Interface

The DSRC-based transaction interface standard. Integration at the capture-system boundary respects this interface on the field-system side.

Supported

CEN/TS 16986 Electronic Fee Collection — Interoperable Exchange

The European standard for exchange of toll data between service providers and toll chargers. Aligns with our Nexus-to-operator data model.

Committed

GTFS / GTFS-RT Transit Data Standards

Industry-standard transit data schemas. Relevant for future Quantum Metro™ transit-extension deployments.

Planned

Data Handling & Residency

How we handle transaction and settlement data, and the controls we commit to.

GDPR-aligned data handling

Data minimization, purpose limitation, and subject-access processes aligned with GDPR principles. Personal data from account-linked transactions processed under agreed operator / authority boundaries.

Supported

Regional data residency

Deployment-scoped data residency commitments: data stays within the operating jurisdiction agreed in the engagement contract. No cross-border data flows without explicit authorization.

Supported

SOC 2 Type II Service Organization Controls

Security, availability, and confidentiality controls audit. On the engineering roadmap for first production deployment.

Committed

ISO/IEC 27001 Information Security Management

Information security management system certification. Planned following SOC 2 and first production deployment.

Planned

CCPA California Consumer Privacy Act compliance

Relevant for US deployments involving account-linked transactions with California residents. Supported alongside GDPR under our data-handling framework.

Supported

Architectural Guarantees

These are properties of the architecture itself — not optional features or paid add-ons.

Immutable event lineage

Every transaction retains a tamper-evident history from capture through settlement. Write-once, verifiable by authorities, finance, and audit functions.

Supported

Authority-retained control

Pricing, policy, validation, and enforcement decisions stay with participating authorities. Quantum Nexus™ does not assume ownership of these.

Supported

No revenue custody

Settlement outputs are produced without Quantum Mobility taking custody of revenue flows. Participating authorities and operators retain financial control end-to-end.

Supported

Cross-agency audit consistency

Shared audit rules and lineage across operators and agencies. Auditors see the same transaction history regardless of which operator's system originated the event.

Supported

Detailed Compliance Questions?

If you're running RFP evaluation or internal procurement review, we're happy to walk through any of these commitments in detail — and respond to specific compliance questionnaires.