Corporate

Built by practitioners.
For institutional use.

KXCO is a UK and US software company building post-quantum infrastructure for corporates, licensed institutions, and AI agents. This page provides company background, leadership, regulatory positioning, and the institutional case for deploying KXCO infrastructure.


Leadership

The team behind the infrastructure.

Founder & Chief Executive Officer
Shayne Heffernan Ph.D.
Knightsbridge Group  ·  Est. 1987  ·  Bangkok · Doha · Paris · London

Economist with 40 years in global capital markets with an Asia-Pacific focus. Founded Knightsbridge Group in 1987 and KXCO. The conviction that post-quantum cryptography must become the foundational layer of financial infrastructure — not a retrofit — is not a thesis for KXCO. It is the organisation's reason for existing. KXCO builds the infrastructure that regulated institutions will need to meet post-quantum migration obligations. It does so on the same architecture that will still be valid when quantum computers become cryptographically relevant.

Strategic Advisor — Capital Markets
Steve Chaykowsky

15 years proprietary trading and banking experience. Technical market advisor for Mellon Bank, BlackRock, and JP Morgan Asset Management. Awarded Top 10 Visionary Leaders 2026.

Strategic Advisor — Financial Services Technology
Dan Frasco

20+ years at Fidelity Investments in technology and infrastructure leadership. Modernised DTCC core clearing facilities supporting $1.4 trillion in annual clearing. BA Computer Science & Economics, Williams College. Specialist in automation, cybersecurity, and software-driven infrastructure.

Senior Advisor — Asia Pacific & Digital Assets
Vincent Song

Vice Chairman, Hong Kong Blockchain Association. Former Global VP at XT.COM — scaled to 9 million users and $1B+ daily transaction volume, AIBC Best Exchange of the Year. Previously Director at Lenovo-IBM Asia Pacific, achieving No. 1 market share.

Strategic Advisor — Investment Banking & Blockchain
David Chlapowski

Serial entrepreneur. Former Senior Vice President at Bear Stearns with extensive Wall Street investment banking experience. Leadership across financial services, technology, and blockchain. Expertise in cloud infrastructure, network performance, and digital forensics.

Strategic Advisor — Technology & Enterprise
Lanny Cohen

Former CEO North America, Group CTO, and Chief Innovation Officer at Capgemini. Vice Chair and Chief Portfolio Officer at iByond. Former Partner at EY. Advisory roles at Knightsbridge and Ideagen.

Strategic Advisor — Fintech & Legal
Grant Leech

20+ years building and leading fintech businesses. Law Degree, Higher Diploma in Computer Science, Graduate Diplomas in Finance & Accounting. Led M&A strategy across UK and Ireland spanning multiple jurisdictions.

Strategic Advisor — Cybersecurity
Sean O'Coiligh

30+ years in cybersecurity. Led Offensive Cyber Security at DTCC's Cyber Threat Fusion Center for over a decade. Founder of the Pen Test Managers Group at FS-ISAC. U.S. Marine Corps — Signal Intelligence and Electronic Warfare across four combat theatres.

Strategic Advisor — BlackRock & Sovereign Capital
Ramadan Ameen

Former Relationship Manager, BlackRock — Official Institutions Group. Raised $1.3B from sovereign wealth funds, central banks, and pension funds. MBA Columbia.

Strategic Advisor — Enterprise Architecture
Martin Etlis

Oracle. EY. Deloitte. PA Consulting. Delivery lead for Nordea and Svensk Exportkredit. CEO, Creavi Holding AB.

About KXCO

Post-quantum infrastructure
built for institutional deployment.

KXCO is a UK and US software company. It builds post-quantum infrastructure for institutions that require long-term cryptographic security — not as an upgrade to schedule for later, but as a structural property of every system deployed today.

The company was founded on a single premise: the institutions that begin deploying quantum-safe infrastructure now will complete that transition on their own terms. Those that delay will face an emergency response under regulatory pressure, with less time and less control.

KXCO does not provide custody, hold assets, or operate as a licensed financial institution. It builds the software layer that licensed institutions deploy to meet their own obligations. The infrastructure is the product. The institution is the operator.

The Armature L1 blockchain, the PQC Hosting and Bastion scanning platform, KXCO Sign, KXCO Verified, and the KnightsVault white-label banking infrastructure are all built on the same post-quantum cryptographic foundation — NIST FIPS 203, 204, and 205.

Every signature, every credential, every deployment attestation uses ML-DSA-65 and is anchored permanently to Armature L1. There is no retrospective migration path on KXCO infrastructure. The post-quantum security is architectural, present from the first operation, and independently verifiable by any third party.

Knightsbridge Group, established in 1987 with operations across Bangkok, Doha, Paris, and London, provides the institutional foundation and capital markets experience from which KXCO was built.

Corporate & Institutional Case

Why the migration obligation
is a present-day decision.

The quantum threat is not a future problem that can be addressed in a future budget cycle. Data being signed today under RSA or ECDSA may be vulnerable before the obligations those signatures cover have expired.

Long-dated exposure
Contracts signed today may be challenged before they expire
Legal agreements, supply chain commitments, financial contracts, and board resolutions are routinely expected to remain valid and enforceable for decades. A signature produced today under RSA or ECDSA creates a record that may be decryptable before the obligation it governs has run its course. KXCO provides ML-DSA-65 signing for documents and transactions with multi-decade validity requirements — from the moment they are created, not as a future upgrade.
Audit obligations
Permanent on-chain records that cannot be taken offline
Corporate audit obligations frequently extend 7 to 25 years depending on jurisdiction and sector. Records held on servers — even well-secured ones — are subject to organisational change, vendor failure, and data loss. KXCO anchors audit records to Armature L1, a live blockchain where every record is permanently stored, independently auditable, and not dependent on any KXCO-controlled infrastructure remaining available. The record exists on the chain. It does not require KXCO to verify it.
Harvest-now-decrypt-later
Adversaries are collecting data now to decrypt later
State-level actors with long-term strategic interests are collecting encrypted data today — financial transactions, communications, legal documents — with the stated intention of decrypting it once quantum capability becomes available. This is not theoretical. It is documented in intelligence assessments and publicly acknowledged by the NSA, NCSC, and equivalent agencies. Documents and transactions that must remain confidential for years or decades should be signed and encrypted under post-quantum standards from the moment they are created.
AI agent exposure
Autonomous systems acting on behalf of the organisation need verifiable identity
Organisations deploying AI agents to transact, sign documents, or interact with counterparties on their behalf face a specific identity problem: the agent's identity must be verifiable without relying on any single server or intermediary. KXCO issues ML-DSA-65 agent credentials anchored on Armature L1 — verifiable by any counterparty at any time, without trusting KXCO or the deploying organisation as an intermediary. The agent's identity is a fact on-chain, not a record in a database.
Regulatory Alignment

KXCO aligns with the standards
institutions are required to meet.

Post-quantum migration is no longer discretionary. The G7, NIST, and NSA have each issued binding guidance. KXCO's cryptographic baseline is built to satisfy these obligations from day one.

Standards compliance

All KXCO cryptographic operations implement NIST FIPS 203 (ML-KEM), 204 (ML-DSA), and 205 (SLH-DSA) — the ratified post-quantum standards published in 2024. These are the same standards to which all US federal systems must migrate by 2029, and to which the G7 financial sector has been formally directed.

Institutions deploying KXCO are not building toward compliance. They are operating on a compliant foundation from the first transaction. There is no subsequent migration step required when regulatory enforcement begins.

  • NIST FIPS 203 — ML-KEM (key encapsulation)
  • NIST FIPS 204 — ML-DSA (digital signatures, all operations)
  • NIST FIPS 205 — SLH-DSA (stateless hash-based signatures)

No full system replacement

KXCO integrates with existing financial infrastructure as a post-quantum layer. Institutions do not need to replace core banking systems, trading platforms, or existing settlement infrastructure to deploy KXCO. The product is a software layer that adds post-quantum signing, identity, and audit capabilities to existing operations.

Migration advisory engagements are available now. Institutions that begin the assessment and architecture process now will complete migration on their own schedule — before regulatory deadlines and before the regulatory exposure begins.

  • Integrates with existing infrastructure without rip-and-replace
  • Software-only deployment — no hardware dependency
  • Structured compliance reports ready for regulatory submission
2024
NIST standards ratified. FIPS 203, 204, and 205 published as final standards. Post-quantum migration is now a defined compliance obligation for US federal systems and a formal expectation for financial sector infrastructure globally.
Jan 2026
G7 Cyber Expert Group mandate. The G7 CEG publishes a formal post-quantum migration roadmap. Financial sector infrastructure is identified as a priority category. Institutions are expected to be in active migration programmes.
2027–28
CNSA 2.0 transition window. NSA begins formal deprecation of RSA and ECDSA for national security systems. Institutional systems handling data classified at any sensitivity level face direct compliance pressure.
2029
US federal deadline. All federal systems are required to complete post-quantum migration. Regulatory enforcement for financial institutions begins. Institutions without quantum-safe infrastructure face direct compliance exposure.
2030–31
Estimated quantum window. Cryptographically relevant quantum computing is projected to become viable. Harvest-now-decrypt-later attacks using data collected from 2024 onward become actionable. Organisations still operating on RSA or ECDSA at this point face an emergency transition, not a planned one.
2035
NSA full prohibition. NSA prohibits RSA and ECDSA across all systems. Equivalent EU and international requirements are expected to align. For organisations whose contracts and records extend beyond this date, any signature produced today under classical cryptography is a liability.
Next Steps
Engage KXCO for your institution.

Whether you are assessing post-quantum migration risk, evaluating infrastructure for a regulated deployment, or building AI systems that require verifiable on-chain identity — the conversation begins with a direct engagement. Use the contact page to reach the appropriate team.

Contact KXCO  →