Orphaned Access: The Silent Cybersecurity Gap
Benedikt Langer
5 Min. Read Time Service accounts, API keys, and AI agents often outnumber human accounts. Many of these ...
For shop and CRM, the cloud remains the default. In production, energy, logistics and trade, latency, data sovereignty, bandwidth and fault tolerance decide which part of the workload must run locally.
IN BRIEF
Related:When Werkshalle and Data Center become a network / Static RZ contracts meet flowing EnEfG
What is Edge Computing? Edge Computing processes data near the point of origin: on the machine, at the site or in a local cluster. The cloud often handles aggregation, training and central control. Goals are shorter latency, less bandwidth and local availability. The cloud is often the place for aggregation, training and central control.
The shift to a centralized cloud was a rational decision. Rather than dispersing compute power across numerous sites, it funnels it into a handful of elastic, scalable locations, delivering operational comfort, scalability, and a predictable cost structure. For an online shop, a CRM, or a data warehouse, this remains the right choice. The notion that every workload follows the same logic, however, does not stand up in practice.
When data is generated where physical processes occur, the calculus changes. A production line, a transformer station, a logistics hub, or a retail outlet produces data streams whose value is tied to place and time. Shipping these streams hundreds of kilometres just to receive a decision back is often technically unnecessary and economically costly. Edge computing pushes processing back to where it is needed. The real task is not deciding on a warehouse, but categorising each workload according to clear criteria.
The crucial question is which part of a workload belongs where. Edge and cloud are a continuum.
Latency. Where a machine must react in milliseconds, a detour via a distant data center is inadmissible. Quality control in sync with production, control of driverless transport systems or safety functions in energy technology require closed control loops on site. The return channel to the cloud costs time here that the process does not have.
Data sovereignty. Personal data, security‑relevant or regulated data are subject to provisions regarding where they are stored and who may process them. If processing remains at the site, control over the data path remains traceable. This is less a matter of comfort than of compliance in the DACH region.
Bandwidth costs. Cameras, sensors and measurement technology generate raw data in a volume that cannot be economically mirrored to the cloud. The edge filters, aggregates and sends only the relevant parts onward. This reduces the transmission load and the ongoing cost component for connectivity and storage.
Fault tolerance. A site whose operation shuts down with any disrupted line is poorly designed. Local processing keeps critical functions running, even if the connection to the central site briefly drops. For manufacturing, trade and utilities, this is the difference between continuing operations and downtime.
The four criteria above provide a directional framework. To fine‑tune each workload, we also factor in compute intensity and operational considerations. No single criterion makes the call; it’s the pattern that reveals where a workload belongs.
| Criterion | Supports Edge | Supports Cloud |
|---|---|---|
| Latency | Real‑time control, response in milliseconds | Seconds to minutes are irrelevant |
| Data Volume | High raw data volumes from cameras and sensors | Compact, pre‑structured datasets |
| Data Sovereignty | Regulated, personal or sensitive data | Non‑critical data without location binding |
| Fault Tolerance | Operation must continue without connectivity | Short outages are tolerable |
| Compute Intensity | Pre‑processing, filtering, narrow models | Large‑scale training, broad analytics, aggregation |
| Operations | Few, standardized site setups | Central maintenance, elastic scaling |
THE REAL LEVER
The individual data path decides. A blanket assessment of the entire system does not. When Edge and Cloud are framed as a system question, the decision is too coarse. A robust division only emerges when each data stream is individually queried as to whether its processing belongs at the edge or in the central location.
In the German-speaking region, the calculation is being reshaped by a factor that often falls by the wayside in global cloud debates: data sovereignty is anything but a peripheral concern here. Regulations, operational agreements and the requirement to prove the location of processing turn a technical question into a strategic one. Companies that process sensitive process data on-site need not first justify why it has never left a distant data centre.
This is especially true for sectors with long asset lifespans and deep manufacturing depth. Industries such as manufacturing, energy and healthcare keep data whose journey through the infrastructure must be demonstrable. Edge computing provides that proof structurally: processing ends where it begins. For DACH organisations with documentation obligations, that can be a tougher case than any latency measurement.
Some argue that edge computing is expensive to operate: numerous sites, countless small systems, and distributed maintenance. While the objection holds merit, it misses the point. No one builds their data warehouse on a single machine. A sustainable architecture distributes the workload. Time-critical processing, pre-filtering, and local control run at the edge, while aggregation, long-term analysis, and training remain centralized. The edge decides in real time; the cloud learns over time.
This division reduces data transmission and keeps central resources available for the tasks they are actually needed for. By sending only what’s relevant to the cloud, organizations pay less for transmission and storage while gaining on-site failover resilience. The mistake isn’t in using the cloud-it’s in treating it as the default destination for every data stream without even considering where it should reside.
At the outset, an inventory is first carried out, followed by a technology decision. Every relevant data stream is placed on a list and evaluated against four criteria: how strict the latency requirement is, how sensitive the data are, how large the raw data volume is, and what happens in the event of a disrupted connection. From this classification, the allocation almost emerges automatically.
What follows is discipline. Instead of a blanket cloud‑first or edge‑first doctrine, the rule is to run every new workload through the matrix once before it is deployed. This adds a bit of planning time but saves latency, bandwidth, and regulatory burden in operation. Edge Computing thus corrects a blanket assumption and is therefore complementary to the cloud. Not everything belongs in the cloud. The distinction can be identified beforehand.
Whenever latency, data sovereignty, bandwidth costs, or fault tolerance become critical. A machine that must react in milliseconds, handle sensitive data with location binding, process high volumes of raw data from cameras and sensors, or operate without a connection benefits from local processing. The more of these criteria apply, the clearer the answer.
No. Edge and cloud form a continuum. Time‑critical control, preprocessing, and local decision‑making run at the edge, while aggregation, long‑term analysis, and training remain centralized. The resilient architecture splits the workload, rather than choosing a single repository.
A major factor. Regulations and the need to prove the processing location turn a technical issue into a strategic one. Those who process sensitive process data on‑site maintain transparent control over the data path and need not justify why data left a distant data center.
Read more on Digital Chiefs
Digital ChiefsHow to Stifle Open Source Without Banning ItDigital ChiefsVINCI Pays 95 Percent Premium for All for OneDigital ChiefsThe data claim already applies to existing fleetsMore from the MBF Media Network
Image source: AI-generated (July 2026)