The News
Project Eleven, a post-quantum security company focused on digital assets, has announced Relm Insurance as a development partner for Strongpoint, its institutional custody platform. The collaboration will explore how post-quantum security controls might factor into digital asset insurance underwriting, specifically examining areas such as key exposure, signing systems, transaction approval workflows, migration readiness, and third-party dependencies. The partnership is explicitly exploratory: any future underwriting implications would be subject to Relm’s independent processes, but the two companies aim to build a shared framework for evaluating quantum readiness as a risk input.
Analyst Take
A New Risk Category Enters the Underwriting Room
The significance of this announcement isn’t that it solves the quantum threat to digital assets. It doesn’t, and it can’t yet. What it does is begin the process of translating a technical risk into an actuarial one. When insurers start asking questions about post-quantum readiness as part of underwriting, institutions stop treating cryptographic agility as a roadmap item and start treating it as a compliance requirement with financial consequences. That shift in incentive structure matters more than any single product announcement.
The threat itself is real and well-understood in cryptographic circles, even if it remains abstract to most institutional treasury and risk teams. A sufficiently powerful quantum computer could derive private keys from exposed public keys, which is precisely how most blockchain-based custody systems are architected today. The question has never been whether this vulnerability exists; it’s been whether the timeline is urgent enough to justify the cost and operational disruption of migration. Insurance pricing, historically, is one of the most effective mechanisms markets have for forcing that kind of calculus.
What Developers and Architects Should Watch
Strongpoint’s architectural approach is worth examining closely. Project Eleven has made a deliberate design choice to separate institutional controls from the cryptography layer, which means signing algorithms can be swapped out without disturbing approval workflows or audit history. For developers building or evaluating institutional custody infrastructure, this is the right abstraction. Cryptographic agility isn’t a feature; it’s a prerequisite for any system expected to operate across a multi-decade horizon. The hard engineering problem is ensuring that the migration path doesn’t introduce new attack surfaces or break auditability chains, both of which Strongpoint’s design aims to address directly.
The Relm partnership adds a dimension that purely technical products often lack: a structured feedback loop from underwriters about what evidence and controls actually matter for risk assessment. That input is genuinely valuable. Insurance companies have spent decades developing frameworks for evaluating operational risk, and the vocabulary of key exposure, signing system auditability, and third-party dependency mapping translates reasonably well into existing enterprise risk management categories.
The Incentive Problem This Solves
The deeper problem this partnership is trying to address is an adoption timing problem. Institutions rationally delay expensive infrastructure migrations until they must act. Without external pressure, post-quantum migration sits permanently in the “important but not urgent” category. Regulatory mandates can create that pressure, and NIST’s finalization of post-quantum cryptography standards is already doing some of that work. But regulatory timelines in financial services tend to be long and negotiated. Insurance pricing can move faster and more granularly, rewarding early movers before regulators require it.
This is where the business case for ITDMs becomes concrete. If an institution’s post-quantum security posture eventually influences its insurance premiums on digital asset custody, the ROI calculation for investing in Strongpoint or similar infrastructure changes significantly. The partnership is still at the “exploration” stage, and Relm is careful to note that any underwriting implications require further independent evaluation. But the direction of travel is clear: quantum readiness is becoming a risk management conversation, not just a cryptography one. Institutions that wait for regulatory mandates to act will likely find themselves in a worse position than those that establish demonstrable controls now, both from a security standpoint and, eventually, from a cost-of-insurance standpoint.
It’s also worth noting what this partnership does not include, at least publicly: specific premium adjustments, a defined scoring rubric for post-quantum readiness, or a committed underwriting product. This is framework-building, not product launch. The value of the announcement lies in establishing that two credible players in their respective domains are treating this as a serious near-term risk category.
Looking Ahead
The immediate next step for this partnership will be defining what “demonstrable post-quantum readiness” actually means in underwriting terms. That work, translating technical controls into auditable evidence that an insurer can evaluate, is harder than it sounds and will require iteration. Expect Strongpoint’s product roadmap to be meaningfully shaped by Relm’s underwriting feedback over the next 12–18 months, with the most likely outputs being standardized attestation frameworks and audit artifacts that institutions can present to insurers and, eventually, regulators.
More broadly, this collaboration signals the beginning of a market structure that will look familiar to anyone who watched cyber insurance mature over the past decade. Cyber insurance started as a niche product with vague underwriting criteria, then progressively tightened its requirements as the industry developed better frameworks for evaluating controls. Post-quantum risk in digital assets is at an earlier and arguably more tractable stage, because the threat is more precisely defined. Vendors that help institutions build auditable, insurable post-quantum postures now are positioning for a market that will be substantially larger and more standardized within three to five years.
Stay Ahead of Application Development Trends
Get weekly analyst insights, research notes, event coverage, and AppDevANGLE updates delivered directly to your inbox.
Subscribe for Weekly Insights
Join technology leaders, practitioners, and GTM teams following the trends shaping modern software delivery.
Looking for deeper research access?
Explore ECI Research reports, survey insights, and market analysis through the ECI Research Portal.
