Ownership needs
an operating plan.
Who holds the signing keys? Who can authorize a transfer? What happens if a person, device or service becomes unavailable?
Compare responsibilities.
A starting framework, not a provider recommendation. Actual contracts and technical configurations determine control.
| Model | Signing responsibility | Questions to investigate |
|---|---|---|
| Provider custody | A service controls the signing system for the customer. | Legal title, withdrawal rights, insolvency treatment, reserve verification, service limits. |
| Self-custody | The holder operates their own signing and recovery arrangements. | Backup integrity, physical security, device failure, succession and test recovery. |
| Collaborative multisig | Signing keys are distributed under a specified threshold. | Who can form a valid signing quorum? Can recovery proceed without a service provider? |
| Exchange-traded exposure | The investor owns product shares, rather than operating a Bitcoin wallet. | Fees, product structure, custody arrangements and redemption rights. |
Context: Bitcoin Developer Guide: Wallets; SEC, 10 January 2024. Provider example: Unchained business vaults (undated, reviewed 14 November 2026).
Approval and signing
are separate controls.
A company policy may require two approvals while its wallet has a different technical signing threshold. Document both, then test how they interact.
Illustrative operating sequence. This site does not create keys, operate vaults or authorize transactions.
A practical review agenda
People and permissions
Document authorized roles, transaction limits, separation of duties and the procedure for changing staff or keyholders.
Recovery and continuity
Record recovery responsibilities in an appropriate secure process. Test recovery without exposing private keys in email or shared documents.
Evidence and reconciliation
Agree how addresses, balances, confirmations and accounting records will be checked. Set an independent review schedule.
Provider review
Evaluate jurisdiction, contractual obligations, withdrawal procedures and service continuity. Multisig can distribute risk but does not remove every legal, operational or security risk.
Start with better questions.
Explore the research. Make your assumptions visible.