The choice between a qualified custodian and self-custody comes down to which risks a company would rather manage. A qualified custodian takes on the operational work of protecting keys, but the company then depends on that custodian's solvency, controls and legal structure. Self-custody removes that dependency, but the company must run security, continuity and audit evidence itself.
What "qualified custodian" means
The term comes from regulation rather than marketing. In the United States, for example, the investment adviser custody rule uses "qualified custodian" to describe certain regulated institutions, such as banks and some trust companies, that may hold client assets. Other jurisdictions use different terms and tests.
For a corporate treasurer, the practical meaning is narrower: a custodian that is subject to regulatory supervision, holds client assets under a defined legal framework, and can evidence its controls through independent audit. Whether a given provider qualifies under a specific rule is a legal question. Companies should take their own legal advice.
Qualified custodian vs self-custody: the core trade-off
| Factor | Qualified custodian | Self-custody |
|---|---|---|
| Who controls keys | Custodian | Company |
| Counterparty risk | Present: custodian solvency and conduct | Largely removed |
| Operational risk | Mostly with custodian | Entirely with company |
| Insurance | Often available through custodian | Must be arranged separately, if available |
| Audit evidence | SOC reports, confirmations | Company must design and evidence controls |
| Speed of movement | Subject to custodian processes | Subject to company's own quorum |
Neither column is "safe" or "unsafe". Each is a different allocation of risk.
The case for a qualified custodian
Specialist controls
A regulated custodian should operate formal key ceremonies, hardware security, geographic distribution of key material, and segregation of duties among its staff. Few companies can replicate this cheaply.
Independent assurance
Auditors are familiar with relying on custodian confirmations and SOC 1 Type II reports. A Type II report covers how controls actually operated over a period. That can simplify the year-end audit considerably. See our audit readiness checklist.
Insurance and legal structure
Many custodians carry insurance and hold assets in structures, such as trust arrangements, designed to keep client assets separate from the custodian's own estate. The protection is only as good as the contract and the governing law, so read both.
The case for self-custody
No custodian balance-sheet risk
If the company holds its own keys, there is no third party whose insolvency could freeze or put at risk its Bitcoin. For some boards, this is the deciding factor.
Direct control
Withdrawals depend only on the company's own approvers. There is no external processing queue or cut-off time.
What self-custody demands
Self-custody is not a lighter option. It requires:
- A written key management and signing policy.
- Multi-signature or equivalent so that no single person or device can move funds.
- Dual control over every transaction: one person proposes, others approve.
- Secure, geographically separate storage of keys and backups.
- Documented and tested recovery procedures, including for the departure or death of a key holder.
- Evidence an auditor can test: logs, ceremony records, access lists and reconciliations to the blockchain.
Practical tip: if your team cannot describe, in writing, exactly how funds would be recovered if two key holders became unavailable on the same day, you are not yet ready for self-custody.
The governance lens
Boards should test both options against the same five questions.
- Segregation: are the company's assets identifiable as its own at all times?
- Bankruptcy remoteness: what happens to the assets if the custodian, or a key service provider, fails?
- Insurance: what is covered, at what limit, and what is excluded?
- SOC reports or equivalent: is there independent evidence that controls work over time?
- Signing quorum and dual control: how many people must approve a movement, and can any one person act alone?
For a qualified custodian, most answers come from the provider's documents. For self-custody, the company must write the answers itself, and then live by them.
The middle path: shared control
Many companies choose neither extreme. In a shared-control model, keys are split across the company and one or more independent key holders using multisig. A typical design requires two of three keys to sign, with the company holding one or two.
This can reduce single points of failure on both sides. The company cannot lose everything through one internal error, and no outside party can move funds alone. The cost is more complexity: more contracts, more parties to coordinate, and a recovery plan that must work across organisations.
Another common pattern is to split holdings by purpose. A long-term reserve may sit with a regulated custodian or in a deep cold-storage multisig, while a smaller operational balance sits where it can move quickly for settlement.
Questions to settle before deciding
- How large is the holding relative to the company's balance sheet and liquidity?
- How often will the Bitcoin move?
- What internal security and operations capability exists today, and who owns it?
- What will auditors, lenders and investors expect to see?
- What does the company's legal counsel say about insolvency treatment in the relevant jurisdictions?
Our overview of corporate Bitcoin custody options covers each model in more depth, and the due diligence list helps compare providers.
How The Bitcoin World helps
We help finance teams compare custody models against their own governance requirements and document the decision for the board. We do not hold keys or client assets. Custody and execution are carried out by licensed third-party institutions. See our custody architecture service.