Relm and Project Eleven explore how quantum risk could enter insurance
The partners will study digital-asset custody and security controls. Their agreement does not establish a new policy, a premium reduction or a date for quantum attacks.
.jpg){kind=link}
Relm Insurance and Project Eleven announced an exploratory partnership on October 20 to study quantum-related risk in digital-asset insurance. Relm is a development partner for Strongpoint, Project Eleven’s institutional custody product. The insurer will advise on its design and development, including evidence that could help underwriters assess post-quantum security controls.[1][2]
The proposed assessment includes exposure of cryptographic keys, signing and approval processes, migration readiness and dependencies on other providers. The partners want to explore how evidence about those controls might inform underwriting. The announcement does not say a particular asset is now insured against quantum attack or that customers will receive lower premiums.[1]
Relm explicitly describes future insurance and pricing decisions as subject to independent underwriting. That boundary is central to the story. Researching a risk category, evaluating an applicant and issuing a policy with defined coverage are different steps. A collaboration announcement cannot substitute for the wording of an actual contract.[1]
QubitWire’s assessment is that the useful contribution would be a way to document a concrete security condition. For example, an evaluator could ask whether a key-management change has been tested across the full signing workflow and whether every dependent service supports it. That is more informative than labeling a system quantum-ready without describing the controls behind the label.
Evidence also needs a time boundary. A control assessment records the system examined and the configuration in use; it should not be treated as a permanent statement about every later software change. Likewise, a migration plan should distinguish decisions already implemented from work that depends on a supplier’s future release.
The partnership provides no date at which quantum computers will defeat the relevant cryptography, and it does not establish policy terms. The next useful output would be a published assessment method or a clearly described product with its scope and exclusions. Until then, this is research into how a developing technical risk might be evaluated, rather than a new insurance promise.