QComply is software from QComply AG in Zurich for the move to post-quantum cryptography. It discovers the cryptography an organisation runs: keys, certificates, algorithms and libraries across servers, applications, APIs and network devices, using agent-based and agentless scanning. The result can be exported as a CycloneDX cryptographic bill of materials (CBOM). QComply then ranks quantum risk against migration effort, sequences the work in waves, dates it against applicable regulations and tracks progress with audit-ready reporting. An engagement with a post-quantum architect is also offered.
QComply AG is headquartered in Zurich, with a Polish subsidiary in Warsaw; no parent group is named. According to the vendor, the platform runs on-premises inside your own environment and your cryptographic data never leaves your infrastructure. The vendor states no hosting location of its own, so the data location is the one you choose. Switzerland is not in the EU but is an EFTA country with an EU adequacy decision. Ask the vendor about support access and data processing terms before deployment.