Export control

Our commitment

SandGrain developed CyberRock, a post-quantum-resilient authentication platform designed for aerospace and defence applications.

Operating at the intersection of security technology and national defence, we recognise the significant regulatory responsibilities that come with developing and supplying cybersecurity products of this nature. We take our export control obligations seriously and hold ourselves to the highest standards of compliance.

Regulatory framework

CyberRock may be classified as a dual-use item under EU Regulation 2021/821 and applicable national export control regulations. Where this applies, export outside the European Union requires prior authorization from the competent national licensing authority.

SandGrain complies fully with these requirements as a condition of doing business.

    Scope

    For defense-related purposes, SandGrain supplies CyberRock exclusively within Europe and to NATO member states. This reflects our strategic focus and our commitment to the collective security of democratic allies. All applicable licensing, end-user verification and transfer authorization requirements are rigorously observed. The transfer of controlled technology to any unauthorized party, state or end use is strictly prohibited.

      Compliance

      Program Export control compliance is embedded in our governance, processes and culture. All personnel involved in the development, sale or support of CyberRock are trained on their obligations. Our compliance team monitors regulatory developments and maintains contact with relevant licensing authorities. Our standards are upheld consistently across all operations.

      Export control enquiries

      For export control enquiries, please contact our compliance team: