Pillar F · State as of 2026-08-06

When will my industry need quantum capacity?

As of August 2026, no honest answer to this question is a date. Timing is set by the problem class you own, not by your industry label or any vendor's calendar. Three of the four major classes have no measured crossover; the one class with a real deadline is cryptography, where NIST has already scheduled the retirement of today's public-key algorithms — deprecated after 2030, disallowed after 2035 — regardless of when the hardware arrives. The rational posture is not a date. It is a monitoring discipline that costs almost nothing.
→ Leer en español
State as of: 2026-08-06

"When will my industry need this?" is the most common timing question a strategy team asks about quantum computing, and it is built on a unit error. Industries do not adopt quantum capacity. Problem classes cross over — or fail to. An insurer, a logistics operator, and a chemicals company are not three points on one adoption curve; they are portfolios of different problem classes, each with its own clock, and most of those clocks have not started.

This post is a framework for reading the clocks yourself — from public signals, without buying anyone's marketing. It makes no date prediction, because as of August 2026 no measured basis for one exists outside a single class.

Why "industry" is the wrong unit of timing

McKinsey's Quantum Technology Monitor 2026 (April 2026) counts 300+ companies actively engaging with quantum technology, a third of them spending over $10M per year, led by chemicals, life sciences, logistics, and financial services. Read carefully: that is a measurement of anticipation spend, not of arrival. The same report projects $1.3T–$2.7T of economic value by 2035 — a projection, produced by a party whose clients buy projections.

The unit that actually has a clock is the problem class: portfolio optimization, molecular structure, vehicle routing, integer factoring. Your industry's timing is the timing of the classes you own, weighted by what they are worth to you. Two companies in the same industry can face different clocks; two companies in different industries can face the same one.

FOUR CLASSES, FOUR CLOCKS — AUG 2026CRYPTOGRAPHYCLOCK RUNNING — NIST 2030/2035deadline set by regulator, not by hardwareMOLECULAR SIMULATIONESTIMATED ONLYresource estimates on hardware not yet builtOPTIMIZATIONNO MEASURED SIGNALV-0012: classical optimal 20/20, no crossover seenQUANTUM MLCLOCK RESET 2018–2020dequantization removed the exponential claimsgold = estimated/regulatory · teal = measured · dim = regressed

What do vendor roadmaps actually say — and how should a decision-maker read them?

Three major vendors have published dated fault-tolerance targets. The numbers, from primary sources:

Milestone Owner Target date What it claims Source (date)
Starling IBM 2029 ~200 logical qubits, 100M gates IBM Quantum blog (Jun 2025)
Blue Jay IBM 2033 ~2,000 logical qubits, ~10× Starling IBM Quantum blog (Jun 2025)
Apollo Quantinuum 2030 universal, fully fault-tolerant, millions of gates Press release (Sep 10, 2024)
2M-qubit system IonQ 2030 2M physical / 40,000–80,000 logical qubits IonQ blog (Jun 13, 2025)
Deprecation, 112-bit security NIST after 2030 RSA-2048-class crypto deprecated NIST IR 8547 (Nov 2024)
Disallowance NIST after 2035 quantum-vulnerable crypto disallowed NIST IR 8547 (Nov 2024)

Reading rules. First: a roadmap is an engineering target published by the party that benefits from it being believed. Treat every date as the optimistic bound, the same way you read a vendor's benchmark metric. Second: none of these fault-tolerance dates has come due yet, so this generation of promises has a track record of exactly zero — in either direction. Third: the interesting signal is not any single date but the convergence. Three vendors on three different architectures, publishing independently between September 2024 and June 2025, all placed universal fault tolerance in the 2029–2033 window. Convergence is not evidence of feasibility — roadmaps can respond to each other — but it defines the window the industry itself is claiming, which is the correct window to test their delivery against.

TWO CLOCKS — TARGETS ABOVE, DEADLINES BELOW2029203020332035IBM Starling ~200 log.Quantinuum Apollo FTIonQ 2M phys/40–80k log.IBM Blue Jay ~2,000 log.NIST 2030: deprecate112-bit securityNIST 2035:disallowteal = vendor target (not delivery) · gold = regulatory deadline

Which class already has a clock running? Cryptography — and it is not waiting for the hardware

One class is the exception to "no dates": integer factoring and discrete logs, i.e. the class that breaks RSA and elliptic-curve cryptography. Its clock runs on two mechanisms that do not depend on when a cryptographically relevant quantum computer (CRQC) actually arrives.

First, the regulator moved. NIST IR 8547 (initial public draft, November 2024) schedules 112-bit-security algorithms — the RSA-2048 class — for deprecation after 2030 and disallows quantum-vulnerable cryptography after 2035. If your systems must comply with U.S. federal standards, your migration deadline exists today, whether or not any vendor ships fault tolerance on time.

Second, the attack has a retroactive component. Data stolen encrypted today is broken the day a CRQC exists ("harvest now, decrypt later"). Mosca's inequality (IACR ePrint 2015/1075) states the condition: if your migration time X plus the required secrecy lifetime of your data Y exceeds the time Z until a CRQC, you are already late. Z is genuinely uncertain — in the Global Risk Institute's Quantum Threat Timeline Report 2025 (published March 2026), half of the 26 surveyed experts put the probability of a CRQC within 10 years at roughly 50% or higher — but for long-lived secrets, plausible values of X+Y exceed even skeptical values of Z.

Meanwhile the paper cost of the attack keeps falling: the standard resource estimate for factoring RSA-2048 went from ~20M noisy qubits (Gidney & Ekerå, arXiv:1905.09749, 2019) to under 1M (Gidney, arXiv:2505.15917, 2025) — a ~20× reduction in six years, from algorithmic improvements alone, before any hardware was built. That trend line, not any single roadmap, is the number to watch.

What about simulation, optimization, and machine learning?

The other three classes have no regulator and no measured crossover. Their honest status, with evidence:

Molecular simulation holds the strongest theoretical case — simulating quantum systems with quantum hardware — but its crossover exists today only as resource estimates on machines that have not been built. A July 2026 estimate (Sun et al., arXiv:2607.16116) puts a ~100-site 1D Ising simulation at ~2 hours on ~3.7×10⁵ physical qubits, versus ~100 years classically: a paper machine outperforming a real one. Estimated, not measured.

Optimization — the class most industries actually own — has no measured crossover anywhere we know of. Our own sealed series is one small data point: in 20 sealed runs of portfolio optimization (V-0012, n=12/16/20), CP-SAT reached proven optimum 20/20 while QAOA p=2 landed 25–48% away — with the quantum side simulated noise-free, i.e. given its best case. No signal, no crossover observed. And there is a structural reason for patience here: Babbush et al. (PRX Quantum 2, 010103, 2021) show quadratic speedups — the typical best case in this class — do not yield advantage on early fault-tolerant machines. For this class, "fault tolerance arrives 2029–2033" does not imply "your problem gets faster 2029–2033."

Quantum machine learning is the cautionary tale: its clock moved backwards. Between 2018 and 2020, dequantization matched the headline exponential-speedup claims with classical algorithms under equivalent data access. A class can lose apparent maturity when the classical baseline improves — timing is not monotonic.

What can a decision-maker monitor without buying anyone's marketing?

Five signals, all public, all free:

  1. Demonstrated logical qubits, not announced ones. Count peer-reviewed or preprint demonstrations; press releases lag and lead reality in both directions. When a vendor's dated milestone from the table above comes due, check delivery — from 2029 this generation of roadmaps finally acquires a track record.
  2. The resource-estimate trend for your class. Cryptography's estimate fell ~20× in six years on paper. If the same happens for your class's key subroutine, your clock accelerates; if estimates stagnate, it does not.
  3. Same-instance benchmarks against the strongest classical baseline. A crossover claim only counts if both sides ran the same instance under the same rules — a weak baseline moves the crossover by construction, not by physics.
  4. Regulatory clocks. Today only cryptography has one. If a regulator in your sector publishes a dated requirement, that class's timing question is answered for you.
  5. The price of checking. The first two gates of a cheap feasibility pipeline — strong classical baseline, noise-free simulation — cost approximately $0. Monitoring is nearly free; premature capacity is not.

The decision rule that falls out: you need quantum capacity when the crossover for your problem class is measured, not estimated — and you need a migration plan the moment a regulator or your data's shelf life gives your class a deadline, which for cryptography has already happened. Everything else is monitoring, and monitoring is cheap.

What we don't know

Rosetta Q publishes verdicts with reproducible raw data. This is educational content, not a product claim.

Sources:
· IBM Quantum blog — path to large-scale fault tolerance (Jun 2025)
· Quantinuum press release — roadmap to Apollo (Sep 10, 2024)
· IonQ blog — accelerated roadmap (Jun 13, 2025)
· NIST IR 8547 — Transition to Post-Quantum Cryptography Standards (initial public draft, Nov 2024)
· Global Risk Institute — Quantum Threat Timeline Report 2025 (Mosca & Piani, pub. Mar 2026)
· Mosca — Cybersecurity in an era with quantum computers (IACR ePrint 2015/1075)
· McKinsey Quantum Technology Monitor 2026 (Apr 2026)
· Gidney & Ekerå — How to factor 2048-bit RSA (arXiv:1905.09749, 2019)
· Gidney — RSA-2048 with under a million noisy qubits (arXiv:2505.15917, 2025)
· Babbush et al. — Focus beyond quadratic speedups (PRX Quantum 2, 010103, 2021)
· Sun et al. — resource estimate, 1D Ising utility-scale simulation (arXiv:2607.16116, Jul 2026)