What we honestly don't have yet

Most vendor sites tell you what they have. This page tells you what they don't. We publish this because procurement teams will ask anyway — better to disarm the question than have it surface as a surprise. Last revised 2026-04-25.

Customers

• Zero paying customers today. The founding-cohort programme is open and we are looking for partner #1.
• No completed pilots. Target time-to-pilot is 14 days from signed contract; we have not yet measured a real median.
• No published case studies. We will not publish a case study without the customer's written consent and review.

Compliance & certifications

• SOC 2. Not in audit today. Type I targeted Q3 2026 once founding-cohort revenue covers the audit cost.
• ISO 27001. Roadmap. Not started.
• FedRAMP / IL-2 / IL-4. Not pursued. We are not currently a US federal vendor.
• SIG-Lite questionnaire. Pre-fill in progress (~100 of ~280 questions scaffolded). Available on request — we will tell you which questions are answered vs flagged.
• HIPAA. Not pursued. IMS does not process PHI.
• HECVAT. Not pursued.

Authentication & access control

• SAML 2.0 SSO. Roadmap. Not implemented today. Bespoke OIDC integration on contract.
• SCIM provisioning. Roadmap. Manual user provisioning today.
• Audit-log export to SIEM. Roadmap. Audit-log queryable via API today; no Splunk / Sentinel push connector yet.
• Hardware-key MFA. Roadmap. TOTP and WebAuthn supported on the live console; no hardware-key enforcement policy yet.

Deployment options

• On-prem productised. Roadmap. Bespoke on-prem builds available on contract.
• Air-gapped Helm chart with signed images. Roadmap. Same caveat as above.
• EU data residency on dedicated infrastructure. Available on contract; not currently provisioned. We will spin a Hetzner Falkenstein droplet for any institutional contract that requires it (typical lead time: one business day).
• FedRAMP-equivalent US-region. Not pursued.

Source coverage

• ACLED structured event records. Behind a paid subscription — not in our public open-data tier today. Reachable on the founding-cohort roadmap.
• Janes Defence. Not integrated.
• Recorded Future. Not integrated.
• Vetted local Telegram / Signal channels. Roadmap. We do not source from non-disclosed channels.
• Sub-second satellite imagery alerting. Out of scope. We are not a remote-sensing vendor.

Product features

• Mobile native apps (iOS / Android). No. Web console is responsive; mobile push notifications via PWA on roadmap.
• Real-time multi-user collaboration on a brief. Roadmap. Today: single-author briefs with audit-trailed forwarding.
• Map-based visual analyst workflow as a primary view. Roadmap. Geo-resolved data is shown but the primary surface is the feed.
• LLM-summarised brief sections written by the system. Off by default. We do not generate analyst-voice text without an explicit human-in-the-loop step.
• Predictive alerting / forecasting. Out of scope. We surface what is happening, not what we predict will happen.

Operational scale

• 24/7 named on-call SLA. Not offered today. Founder pager during business hours; institutional contracts negotiate a real SLA.
• Status page with multi-month uptime history. The page exists at /ims/status but we have not yet accumulated a meaningful operational history to publish percentages.
• Multi-region active-active hot path. No. Single-region deployment today (EU). Multi-region available on contract.

Brand & references

• Years of category recognition. No. We launched the public surface in April 2026.
• Logo wall of household-name customers. No (see "Customers" above).
• Analyst-firm coverage (Gartner, Forrester). No. Not pitching analyst relations until we have references.

Why we publish this

If we want institutional buyers to trust the things we do have — the SHA-256 PDF chain-of-custody, the source-corroboration discipline, the public live feed, the transparent pricing — they have to be able to trust the things we say we don't. The standard pre-launch posture is to claim everything and hope no one checks. We are doing the opposite: claiming little and naming the gaps so the conversation can move on.

If you have read this far, you are exactly the kind of buyer we want. Apply for the founding cohort →

Send corrections or omissions to trust@quintarthai.com. We update this page when reality changes.