Corporate Bitcoin custody is the set of arrangements that decide who controls the private keys to a company's Bitcoin, and under what rules. There are three broad models: a regulated third-party custodian, self-custody by the company, or a shared-control model that splits keys between the company and outside parties. The right choice depends less on technology and more on the company's governance, risk appetite and internal capability.
Why custody is a board-level question
Bitcoin is a bearer asset. Whoever controls the private keys can move the coins, and a confirmed transaction cannot be reversed. There is no bank to call and no chargeback.
That changes the risk profile compared with cash. With a bank deposit, the main questions are credit risk and fraud controls. With Bitcoin, the custody arrangement itself is the control environment. A weak arrangement can mean a total and permanent loss.
For that reason, corporate Bitcoin custody should be decided by the board or a delegated committee, documented in the Bitcoin treasury policy, and reviewed at least annually.
The three main custody models
Third-party custody
A specialist custodian holds the keys on the company's behalf. The company instructs withdrawals through a platform, usually with its own internal approval workflow layered on top.
- Strengths: operational burden sits with a specialist; audit reports and insurance are usually available; familiar to auditors.
- Weaknesses: the company depends on the custodian's solvency, controls and legal structure; withdrawals rely on the custodian's processes and timelines.
Self-custody
The company generates and holds its own keys, typically using hardware devices or hardware security modules, often in a multi-signature setup.
- Strengths: no reliance on a custodian's balance sheet; full control over movement of funds.
- Weaknesses: the company carries all operational, security and continuity risk; key-person risk is real; auditors will want strong evidence of controls.
Shared-control (collaborative) custody
Keys are split, usually through multisig, so that the company holds some keys and one or more independent providers hold others. No single party can move funds alone.
- Strengths: reduces single points of failure; the company keeps meaningful control.
- Weaknesses: more parties, more contracts and a more complex recovery plan.
| Model | Who holds keys | Main risk to manage | Typical fit |
|---|---|---|---|
| Third-party | Custodian | Custodian failure or control breakdown | Companies wanting a familiar, outsourced model |
| Self-custody | Company | Internal error, theft, key loss | Companies with strong security and operations teams |
| Shared-control | Company and providers | Coordination and recovery complexity | Companies wanting control without a single point of failure |
The governance tests every model must pass
Whichever model a company chooses, the same governance questions apply. We suggest boards ask for written answers to each.
Segregation
Are the company's coins held in addresses or accounts attributable to the company alone, or pooled with other clients? Segregated holdings make reconciliation and audit simpler. Omnibus (pooled) structures can be acceptable, but the company should understand how its entitlement is recorded.
Bankruptcy remoteness
If the custodian failed, would the company's Bitcoin be treated as the company's property, or as an asset of the custodian's estate? The answer depends on the contract, the legal structure (for example, a trust arrangement) and the governing law. This is a question for legal counsel, not a sales brochure.
Insurance
What is insured, by whom, up to what limit, and with what exclusions? Policies often distinguish between keys held offline and keys held online. A headline cover figure means little without the terms.
Independent assurance
Does the provider have SOC 1 Type II and SOC 2 Type II reports from a reputable audit firm? A Type II report tests whether controls operated over a period, not just whether they were designed. Read the exceptions section, not just the opinion.
Signing quorums and dual control
Who can approve a withdrawal? How many approvers are required? Can one person both create and approve a transfer? Dual control and a defined quorum are basic expectations. These belong in the company's key management and signing policy.
Practical tip: ask your auditor what evidence they will need about custody before you choose a provider. It is far cheaper to design for audit than to retrofit controls at year end.
Matching the model to the company
There is no universally correct answer. A few questions usually point the way:
- Internal capability: does the company have people who can run secure key ceremonies, maintain devices and test recovery?
- Size of holding: the larger the holding relative to the balance sheet, the more the company should care about single points of failure.
- Frequency of movement: a long-term reserve that rarely moves suits different arrangements from working balances used for settlement.
- Stakeholder expectations: auditors, lenders and investors may have views. Listed companies may face particular disclosure scrutiny.
- Jurisdiction: the legal treatment of custody and insolvency differs between countries. Companies should take their own legal and tax advice.
Many companies use more than one model. A common pattern is a deep reserve in a high-security arrangement, with a smaller operational balance held where it can move quickly. Our guide to qualified custodians versus self-custody sets out that trade-off in more detail.
Common mistakes to avoid
- Leaving Bitcoin on a trading venue after purchase for convenience. Execution and custody are different functions and should usually be separated.
- Relying on one individual who "knows how it works". This is key-person risk in its purest form.
- Treating insurance as a substitute for controls. It is a backstop, not a strategy.
- Never testing recovery. A backup that has not been restored in a test is an assumption, not a control.
- Skipping due diligence because a provider is well known. Use a structured custody due diligence list every time.
How The Bitcoin World helps
We help companies design their custody architecture: choosing the model, defining signing quorums and dual control, and preparing the policy and board papers that document it. We do not hold client assets. Custody and execution are carried out by licensed third-party institutions selected through a documented process. Learn more about our custody architecture work.