- enables end-2-ed encryption by encrypting outside the sdk with the destinations public key - send encrypted data to the sdk that handles further submit of the submision data