The Bitcoin WorldA division of Global Digital Treasury

How to write a Bitcoin treasury policy: a sample outline

By Muhammad Bana4 min readRisk & Governance
Key takeaways
  • A Bitcoin treasury policy turns a board decision into rules that people can follow and auditors can test
  • The core sections are purpose, limits, roles, execution, custody, accounting, reporting and review
  • Write the exceptions process and the review cycle before the first purchase, not after it

A Bitcoin treasury policy is the written rulebook that governs why a company holds Bitcoin, how much it may hold, who can buy or sell it, how it is executed and stored, and how it is reported. It turns a board decision into controls that staff can follow and auditors can test. Most good policies fit on eight to twelve pages and follow the same structure as an existing cash or investment policy.

Why a Bitcoin treasury policy matters

A board can approve a strategy in an afternoon. Running it for years is a different task. The policy is what makes the strategy repeatable when people change, markets move and auditors ask questions.

Without one, three things tend to go wrong:

  • Decisions drift. An allocation agreed at one level creeps upward because nobody wrote down the limit or the trigger for review.
  • Authority is unclear. It is not obvious who can approve a purchase, move coins between wallets or sell in a stress event.
  • Evidence is missing. Auditors and investors ask for approvals, execution records and reconciliations that were never captured.

A policy fixes all three by stating the rules once, in plain language, and naming the owner of each control. If you have not yet agreed the strategy itself, start with what a Bitcoin treasury strategy is.

A sample policy outline

The outline below is a starting point. Adapt it to your existing treasury framework rather than writing a stand-alone document that nobody reads.

  1. Purpose and scope. Why the company holds Bitcoin (for example, a long-term reserve asset alongside cash). Which entities the policy covers.
  2. Objectives and time horizon. What the holding is for and what it is not for. Most corporate policies exclude short-term trading.
  3. Allocation and limits. Maximum holding as a share of treasury assets or net assets, minimum liquidity that must stay in cash, and any per-trade size limits.
  4. Roles and authority. Board, audit or risk committee, CFO, treasurer and operations. Who proposes, who approves, who executes, who reconciles.
  5. Execution. Approved methods (OTC request-for-quote, scheduled execution, block trades), minimum number of quotes, best-execution evidence.
  6. Counterparties. Due diligence standards for liquidity providers and custodians, approval process and annual re-review.
  7. Custody and key management. Approved custody model, signing thresholds, withdrawal whitelists and segregation of duties.
  8. Accounting, tax and valuation. Applicable standard, valuation source, cost basis method and the month-end close process.
  9. Risk monitoring. Drawdown triggers, concentration measures, and what happens when a trigger is hit.
  10. Reporting. What goes to management monthly and to the board quarterly.
  11. Exceptions and breaches. How a breach is reported, who can grant a temporary exception, and how long it lasts.
  12. Review. At least annual review, plus a review after any material market or regulatory event.

Allocation, limits and triggers

This is the section boards read most closely. Keep it specific and measurable. "A prudent amount" is not a limit; "no more than X% of consolidated treasury assets at cost" is.

Useful limits to consider:

  • A ceiling on total Bitcoin as a share of treasury or net assets.
  • A floor on months of operating expenses held in cash or cash equivalents.
  • A maximum single-trade size, above which the board or a committee must approve.
  • A maximum share held with any one custodian.

Triggers should say what happens, not just what is measured. For example: "If the market value of Bitcoin falls below 50% of cost, the CFO reports to the audit committee within five business days." Our article on concentration limits goes deeper on how to set these numbers.

Write the limit on a basis your auditors can verify from the ledger, such as cost or month-end fair value, and say which one. Ambiguity here causes most policy breaches.

Roles and segregation of duties

The person who decides to buy should not be the person who can move the coins. This is the same principle you apply to payments, and it matters more here because a Bitcoin transfer cannot be reversed.

Activity Proposes Approves Executes Reviews
Annual allocation CFO Board — Audit committee
Individual purchase within limits Treasurer CFO Operations via approved provider Finance controller
Wallet withdrawal or transfer Operations Two authorised signers Custodian Treasurer
Exception to policy CFO Board or committee chair — Internal audit

The exact titles will vary. The point is that every row has at least two different people.

Execution, custody and accounting sections

Execution. Name the permitted methods and the evidence required. A common rule is to obtain at least two or three firm quotes for any order above a set size, and to keep the quotes with the trade record. See how companies buy Bitcoin for the steps involved.

Custody. State the approved model (qualified custodian, multi-party signing, or a combination), the signing threshold and the withdrawal whitelist process. Our guide to corporate Bitcoin custody sets out the options.

Accounting. Under US GAAP, FASB ASU 2023-08 requires fair value measurement through net income for fiscal years beginning after 15 December 2024, with early adoption permitted. Under IFRS, holdings are generally intangible assets under IAS 38. The policy should state which applies, the pricing source used for valuation and the cost basis method. Take your own accounting and tax advice before finalising this section.

Reporting, exceptions and review

Good reporting is short and regular. A monthly management pack might show holdings in units, cost, fair value, unrealised gain or loss, headroom against each limit and any exceptions. The quarterly board report adds a short narrative and any recommended changes.

The exceptions clause is often skipped and later regretted. Define:

  • who can approve a temporary exception;
  • the maximum duration before it lapses or returns to the board;
  • how every exception is logged.

Finally, set a review date. A policy that has not been read for two years is a policy that no longer reflects how the company operates.

How The Bitcoin World helps

We draft and refine Bitcoin treasury policies alongside a company's finance, legal and audit teams, aligned to its existing treasury framework. We also prepare the supporting board materials through our board advisory work. Execution and custody are carried out by licensed third-party institutions; we design the process and the controls around them.

Thinking about Bitcoin for your company?

Book a short call. We will talk through your situation and tell you plainly how we would approach it.