Institutional Custody

Overview

Institutional custody can serve funds, companies, banks, family offices, foundations, or other regulated and unregulated organizations. Services may include segregated or omnibus accounts, secure key management, policy-based approvals, settlement, staking, reporting, insurance arrangements, and support for auditors.

The institutional label does not remove counterparty risk. Legal title, regulatory status, asset coverage, sub-custodians, smart-contract exposure, insolvency treatment, and withdrawal rights differ by provider and jurisdiction. Operational controls also depend on how client users and administrators are authenticated.

Organizations should conduct legal, financial, security, and operational due diligence. Contracts need clear segregation, liability, service levels, incident notification, data access, and exit rights. Independent books should reconcile to custody statements and on-chain evidence where appropriate. Recovery and migration should be tested before assets become difficult to move.

Institutional Custody should be distinguished from investment ownership and from a software interface. For example, a provider may display an asset balance while holding pooled assets through another custodian; operations must verify contractual rights, segregation, withdrawal capability, and external evidence rather than rely on the screen alone.

Records for Institutional Custody should reconcile on-chain or provider balances with customer entitlements and the internal ledger by asset, network, account, and cutoff. For Institutional Custody, pending deposits, locked assets, staking, fees, conversions, forks, unsupported transfers, and manual adjustments require separate treatment and review.

The operating model for Institutional Custody should map legal ownership, beneficial entitlement, technical control, account structure, asset segregation, supported networks, signing policy, provider roles, contractual duties, and insolvency treatment. For Institutional Custody, these dimensions can belong to different parties and must not be inferred from a wallet label.