Built for TPRM, CISO, and compliance teams preparing for the post-quantum mandates, assessable, auditable, and built from the ground up to scale.
To CISA CBOM mandate
223 Days
FAR contractor PQC deadline
Dec ‘30
Fintech vendors unassessed
3,000+
How it works
Product 01 · Bank-initiated
The bank sends it, the vendor completes it, and both hold the same evidence when the examiner arrives.
Every new fintech gets a link. Every assessment builds your TPRM audit record, ready for your next DORA, FFIEC, or NCUA examination.
One link per vendor · Evidence retained indefinitely
Know your vendor quantum exposure at a glance. Which vendors are your highest risk? What’s your aggregate supply chain quantum score?
Add one assessment step to your vendor onboarding SOP. PQCClear handles the scanning, scoring, and documentation, your team makes the procurement call.
Every assessment generates a dated, signed audit record. When your DORA, FFIEC, or NCUA examiner asks, you hand them a report, not a spreadsheet.
Credit unions face identical NCUA cybersecurity expectations as banks, with smaller teams. PQCClear is built to work without a dedicated TPRM department.
Banks initiate assessments across their vendor portfolio. Vendors certify on their own and share the result. Every plan runs the full questionnaire and independent scanner.
Community bank
For banks up to $5B in assets running their first quantum vendor assessment program.
$1,500/ month
Credit unions from $750/mo · CUSO pricing available
Regional bank
Most commonFor banks $5B–$50B in assets with a dedicated TPRM team and a larger vendor portfolio.
Custom
1 business day SLA
Large regional & enterprise
For banks $50B+ with complex vendor ecosystems and board-level reporting requirements.
Custom
Founding partner banks receive a locked rate for the life of their contract, first 25 banks only
From the blog
The June 22 executive order sets hard federal deadlines, mandates a Cryptographic Bill of Materials standard, and extends compliance to federal contractors. The line-by-line breakdown for financial institutions.
223
Days to CISA guidance
Dec ’30
FAR PQC deadline
Now
Harvest-now attacks underway
FFIEC examiners are already asking about quantum risk planning. The exact questions they'll ask, and how to prepare your answers.
DORA makes EU banks legally responsible for vendor cryptographic posture. The specific obligations, with a practical compliance checklist.
Regulatory deadline tracker
T−223 days · CBOM standard
Six federal deadlines now apply to financial institutions and their vendors. Each one raises the bar for what your examiner expects to see.
Jul ’26
White House EO · Section 3(a)
Dec ’26
Affects banks with federal contracts
Mar ’27
Automated vendor assessment becomes required
2028
Examiners will ask for your vendor PQC evidence
2030
Full migration required for contractors and agencies
2031
All signing systems must be quantum-safe
The CBOM mandate arrives in 223 days. Most institutions haven’t started their vendor assessment program.
Start your free 30-day pilotGet started
Assess a few vendors. See the PQC Readiness Score for yourself. Hand your examiner real evidence.
Or write to us: contact@pqcclear.com
Design partner program · Q3 2026
We’re onboarding design partner banks, credit unions, and payment processors in Q3 2026. Hands-on setup, direct founder access, and a locked-in rate, in exchange for honest feedback.
Founding cohort, first 25 institutions only
