This is why the transport matters as much as the data itself. Owning every hop of the network is what makes the guarantee enforceable end to end - see how the edge network is built.
Read the delivery docsEvery hop of the network uses hybrid post-quantum key exchange, so traffic captured today stays unreadable tomorrow.
Real-time data is only an advantage while nobody else has it. An adversary who cannot break today's encryption can still record your traffic today and decrypt it once a cryptographically relevant quantum computer exists - and by then your subscriptions, your entities, and the timing of your interest are all readable history. EdgeOrigin closes that window now rather than at some later migration.
Encryption is where vendors are vaguest, because vagueness is hard to disprove. So this is the specific answer: what is negotiated, on which legs of the path, against which published standard, and what remains true if one of those standards is broken later.
Sessions negotiate X25519MLKEM768: classical X25519 and post-quantum ML-KEM-768 together, so a session is only breakable by someone who defeats both. Hybrid is the deliberate choice - a lattice scheme alone would stake everything on cryptography that is newer than the traffic it protects.
Edge node to network, network to your systems, and between our own regions. There is no leg of the path where a record travels under classic encryption alone, because we own every hop rather than handing delivery to a third party.
ML-KEM is specified in NIST FIPS 203 and ML-DSA in FIPS 204, both published in August 2024. X25519MLKEM768 is a registered, recommended TLS supported group. We name the designations so your security team can check them rather than take our word for it.
Session keys are ephemeral and rotated, and past sessions cannot be recovered from a later key compromise. Combined with post-quantum key exchange, a captured session stays captured noise.
The instinct is to treat this as a data-loss question, and for most vendors it is. For a data provider serving funds and research teams it is not: the records themselves are often public somewhere. What is never public is which of them a particular firm chose to watch, and when. That is the asset in the ciphertext, and unlike a price it does not expire.
A subscription list is a portfolio map. Decrypted two years late, it still reveals what a desk was building, when it started, and what it abandoned.
Timing is the whole signal. The moment a fund starts consuming a particular stream is often more informative than any single record inside it.
For an ML team, the dataset composition is the moat. Recovered traffic exposes the corpus, the refresh cadence, and the weighting.
Volumes, regions, and query rhythm describe how a firm works - the kind of detail that never appears in a filing.
This is why the transport matters as much as the data itself. Owning every hop of the network is what makes the guarantee enforceable end to end - see how the edge network is built.
Read the delivery docsA live evaluation measures EdgeOrigin against your coverage requirements: decision-ready real-time data, delivery latency into your systems, and record-level provenance.