DRM — Digital Rights Management & Content Protection
The buyer population — Media streaming distribution services and other media networks and content providers
Base industry report for 5162 →- Establishments · CanadaA
- 449
- Under 10 employeesA
- 75%
Of 449 Canadian establishments with employees, 75% have fewer than ten — mostly small operators. Each of those is one potential account, before any filter for size or fit.
Entry signal — what decides who wins here
One thing must be trueEntry turns on a single condition that can be named and tested before much is spent. Clear it and this becomes an execution question; fail it and no amount of operating skill helps.
Find something that compounds. Entry is achievable and so is the first customer; what is missing is a reason the next entrant cannot repeat it as easily as you did.
Measured, not forecast: the share of US establishments opening in one year that were still active later. It counts good operators and bad ones together, which is exactly why it is the honest answer to “what are the odds”. It is for the whole sector rather than this market, and the ten-year figure comes from an older cohort because no younger one has reached ten years.
This is not a probability of success, and it is not a verdict on you. No survival probability is published per market, and inventing one would be worse than saying so. What the bar reads is how much of the outcome sits inside an operator's control: green means the hurdles are ones a better operator clears, red means the binding constraint is capital, an asset or a permission rather than execution. Someone arriving with an advantage this screen did not assume can win a market shown in red.
Companies named in this market · 15
The binding constraint — defensibility
The rules are set by three platform owners, and two of them give the technology away. Every streamer, broadcaster, OTT service or e-learning video platform that licenses studio or sports content must encrypt it so it plays only in a content decryption module (CDM) on the viewer's device. There are three that matter. Google's Widevine is in Chrome, Android and most smart TVs; Google says it is on '5 billion' devices and describes its solutions as 'free-to-use' [C, vendor]. Apple's FairPlay Streaming is the only option on Safari, iOS and Apple TV, and Apple approves production credentials only for 'a streaming service to consumers'. It refuses 'third-party accounts acting on behalf of content owners or licensees' [A, Apple developer page]. Microsoft's PlayReady (Edge, Xbox, many TVs and set-top boxes) is licensed by Microsoft in three forms: server, intermediate product and final product/device [A, Microsoft licensing page]. None of the three sells a turnkey service to a streamer. They write the robustness rules, certify devices and decide which security levels unlock 4K. What is sold is the layer between them: the multi-DRM licence server. A vendor hosts the key store and issues Widevine, FairPlay and PlayReady licences from one API, priced per licence or per subscriber. That layer is crowded. It has the conditional-access houses that moved from set-top boxes to streaming (Irdeto, NAGRA, Verimatrix), the cloud specialists (castLabs, Axinom, EZDRM, BuyDRM, DoveRunner) and video platforms that bundle DRM (JWP, which bought VUALTO in 2021 [B]). The money is moving from the licence server to forensic watermarking and anti-piracy. That means tracing a leaked stream to the subscriber who leaked it, then taking pirate streams down during live sport, which Friend MTS, NAGRA and Verimatrix sell as services. The two listed incumbents are shrinking or flat. Verimatrix's 2025 revenue fell 19% to $46.5M (from $57.2M). It is selling its mobile app-protection line and refocusing on 'anti-piracy (video protection), the Group's core business' [A, results filing]. Kudelski's Core Digital Security segment (NAGRA/NAGRAVISION) made $229.0M, down 1.9%. Inside it, watermarking and streaming protection grew 'close to 40%' while legacy smart cards and set-top hardware ran off [A, annual results]. Irdeto belongs to MultiChoice, which Canal+ took over in September 2025. Canal+ has announced 'a restructuring programme at Irdeto' [B, Sunday Times, 2026-03-11]. E-book DRM is a separate, smaller and older market. Adobe Content Server (ADEPT) still sits behind most retailer and library e-book lending, and Adobe says it 'has no plans to discontinue support of ACS 4.x' [A, Adobe FAQ]. Readium LCP is the open alternative run by the non-profit EDRLab: it is an ISO standard (ISO/IEC 23078-2:2024), its server is open-source, and it has 'no cost per transaction', only a yearly certification fee [A, EDRLab]. Defensibility decides it. A newcomer cannot own the cryptography, because the CDMs belong to Google, Apple and Microsoft. Apple's credential rule means the FairPlay keys belong to the streamer, which lowers switching costs between licence servers. The service layer already has more than a dozen vendors with public price lists, and the best-known ones are reporting shrinking or flat revenue. The open niche is anti-piracy operations (live-sport takedown, watermark detection), and that is a services business more than SaaS. How this differs from its neighbours: 513-publishing-editorial-and-rights-management covers rights and royalties administration (who owns a title and what is owed), not encryption. 5162-creator-economy-and-streaming-analytics-software covers creator tools and audience analytics. 541514-dam-digital-asset-management stores and governs files inside a company; DRM protects them after they leave it.
Sectors joined: Audio Technology · Gaming/Media · Social Media SaaS · Audio Production · Audio/Materials · Audio/MEMS
[UNVERIFIED] Sector-to-NAICS mapping is analyst judgment — see data/angel-sector-map.json. Counts are a per-record cross-reference and are not additive across records.
The incumbent
Who owns this market and who is coming for it. Fields a screen never reached say so rather than guessing.
Financials & market size — sourced
Figures that came from a filing, a results release or reputable reporting, each carrying its evidence tier.
The field
Every vendor named on this record, and what each one discloses. Most disclose nothing, which is why the market is not sized.
Competitor set · 14 named · 2 disclose revenue
| Name | Revenue | Share | Note |
|---|---|---|---|
| Google (Widevine)C | not disclosed | — | CDM owner. In Chrome, Android, most smart TVs; Google says 5 billion devices and calls its solutions free-to-use. Sets security levels L1–L3 |
| Apple (FairPlay Streaming)A | not disclosed | — | CDM owner for Safari/iOS/tvOS. Credentials approved only for the consumer streaming service itself, never a third party acting for it |
| Microsoft (PlayReady)A | not disclosed | — | CDM owner. Licensed as server, intermediate product or final product/device; fees not published |
| Kudelski (NAGRA / NAGRAVISION)A | $$229.0M Core Digital Security, 2025 (-1.9%) | — | SIX-listed; Cheseaux-sur-Lausanne and Phoenix. Watermarking and streaming protection up ~40% while legacy CA hardware declines |
| VerimatrixA | $$46.5M, 2025 (-19%) | — | Euronext Paris-listed; Meyreuil, France. Multi-DRM, watermarking, Streamkeeper anti-piracy; selling XTD mobile line to refocus on video |
| IrdetoB | not disclosed | — | Owned by MultiChoice, which Canal+ took over in Sept 2025; Canal+ announced an Irdeto restructuring (March 2026). Revenue not broken out |
| CastlabsC | not disclosed | — | Berlin, founded 2007; DRMtoday cloud multi-DRM, watermarking, Widevine CAS and certification. Private, no funding disclosed |
| AxinomC | not disclosed | — | Fürth, Germany, founded 2001, ~100 staff; Axinom DRM alongside Mosaic video platform and in-flight entertainment |
| EZDRMC | not disclosed | — | US cloud multi-DRM-as-a-service (EZDRM, Inc.); private, no funding disclosed |
| BuyDRMC | not disclosed | — | Austin, Texas (NFA Group Inc. dba BuyDRM); KeyOS multi-DRM and MultiMark forensic watermarking |
| DoveRunnerB | not disclosed | — | Formerly PallyCon, from Seoul's INKA Entworks; multi-DRM and forensic watermarking. $8.2M round led by SV Investment, Jan 2025 |
| Friend MTSB | not disclosed | — | UK anti-piracy and watermarking services (Sky, UEFA, Serie A, WBD per 2022 coverage); NorthEdge private-equity investment, 2022 |
| Adobe (Content Server / ADEPT)A | not disclosed | — | E-book DRM behind most retailer and library lending; Adobe says no plans to discontinue ACS 4.x. Not broken out |
| Readium LCP (EDRLab)A | not disclosed | — | Open e-book DRM, ISO/IEC 23078-2:2024; open-source server; no per-transaction cost, yearly certification fee only. Non-profit |
Startups & challengers
Newer and smaller vendors going at the incumbent — funded challengers first. Named, not researched to the depth of the field above; a company with a page here links to it.
| Company | Stage | What it does | Raised |
|---|---|---|---|
| VUALTO | Funded challenger | UK DRM and streaming provider (VUDRM) acquired by JW Player in May 2021; vualto.com now redirects to JWP's jwx.com | — |
Evidence
Evidence. Market size UNVERIFIED: no analyst figure for multi-DRM or anti-piracy spend was sourced, and the private vendors (castLabs, Axinom, EZDRM, BuyDRM, DoveRunner, Friend MTS) publish no revenue. Revenue [A]: Verimatrix's full-year 2025 release (12 March 2026), opened as the AMF/DILA copy because Business Wire returned 403. It shows consolidated revenue of $46.5M (down 19%; $57.2M in 2024), recurring revenue of $33.1M (71%), the planned sale of the XTD mobile line and the refocus on anti-piracy. Kudelski's 2025 annual results (26 February 2026) on nagra.com: revenues and other operating income $371.0M; Core Digital Security $229.0M (down 1.9%); watermarking and streaming protection up close to 40%; Kudelski Labs and NAGRAVISION merged into that segment. Rethink Research (26 February 2026) independently gives $229M for the Digital TV arm [B]. Ownership [B]: The Sunday Times (11 March 2026) for Canal+ owning MultiChoice and Irdeto and planning an Irdeto restructuring. Advanced Television (6 May 2021) for JW Player acquiring VUALTO, terms undisclosed. Advanced Television (6 September 2022) and SVG (12 September 2022) for NorthEdge's investment in Friend MTS, amount undisclosed. Funding [B]: INKA Entworks (PallyCon, now DoveRunner, and AppSealing) raised $8.2M led by SV Investment, per its January 2025 release republished by Silicon UK. Business Wire's copy returned 403. The PallyCon to DoveRunner rename: pallycon.com 301-redirects to doverunner.com, and the docs say the products are now DoveRunner. doverunner.com itself returns 403 to automated access [C]. CDM rules [A]: Apple's FairPlay Streaming developer page (credential approval rule quoted), Microsoft's PlayReady licensing options page (three licence types; no fees published), and widevine.com ('5 billion' devices and 'free-to-use' are Google's own claims, so C as figures). E-book [A]: Adobe's Content Server FAQ and EDRLab's Readium LCP page (ISO/IEC 23078-2:2024, open-source server, yearly certification fee). Vendor homepages were all opened 2026-10-10. castLabs' about page gives Berlin, founded 2007 and customers in 60+ countries [C]. Axinom's gives Fürth, founded 2001, about 100 staff [C]. BuyDRM's gives Austin, Texas [C]. Not verified: per-licence prices, market shares, Irdeto's revenue (not broken out by MultiChoice/Canal+), and castLabs/EZDRM/BuyDRM/Axinom funding (none disclosed).
Where the industry talks
The associations, forums and events where people in this trade actually talk shop — where to listen before entering, and where the first customers are found. Each link was opened on the date shown.
Industry forum behind MPEG-DASH interoperability guidelines, including the CPIX key-exchange format multi-DRM vendors use; membership open to companies
Membership foundation maintaining the open-source Readium reading SDKs that LCP-protected e-books play in
Paris non-profit run by the publishing industry; certifies LCP licence providers and reading systems for a yearly fee
Non-profit (founded 2002) serving the Canadian book industry with standards, data and education, including e-book supply chain
Broadcast and streaming technology convention, Amsterdam; IBC2026 ran 11–14 Sept 2026 and 2027 exhibiting is open. The DRM and anti-piracy vendors exhibit here
The W3C browser API that every web CDM plugs into; Working Draft dated 7 July 2026. Where browser-side DRM rules are argued in public
The Streaming Video Technology Alliance (svta.org) and Streaming Media (streamingmedia.com) bar ClaudeBot in robots.txt, so neither is listed. NAB Show and the Canadian Association of Broadcasters returned Cloudflare challenges, and the Alliance for Creativity and Entertainment returned an Incapsula block. None of these three are listed.
The businesses it sells to
Operating-business records filed along the same branch of NAICS — the customers of this software, screened as businesses in their own right.