Family Office Custody: How to Hold Digital Assets Without Losing Control of Them
For most of the families and offices we talk to, digital assets are no longer a question of whether. They already hold positions, whether the office tracks them closely or not. Exposure tends to build up quietly, through an exchange account here, a personal wallet there, an adviser who made an early allocation on the family's behalf.
What's usually missing isn't the exposure itself. It's the same level of oversight, governance, and continuity the family office applies to every other asset class.
Why do digital assets escape family office governance?
Digital assets escape governance because they rarely get the treatment a family office applies everywhere else: consolidated reporting, clear decision rights, a plan for what happens when circumstances change. Positions sit scattered across platforms with no single audit trail, so there's no clean answer when an auditor, or a family member, asks what is held and where.
What are the risks of holding digital assets through one provider or one person?
The risk is losing access to your own assets through someone else's decision or misfortune. When keys sit inside a single provider's systems, a freeze, a policy change, or an exit from the market can leave the office with no independent way back to its holdings. And when access is tied to one person, one device, or what happens to be in someone's memory, a death, a dispute, or a lost phone can lock a family out entirely. Without the right structure, both failures are one event away.
What does a family office actually need from digital asset custody?
Not more exposure. The office already has that. What it needs is the same three things it expects from every other part of its wealth: sovereignty, so no single party, including any provider, can move assets without the family's involvement; governance, so decisions require the right people, not just one; and continuity, so the structure survives any individual departure, device loss, or dispute, and carries cleanly into the next generation.
How can a family office hold digital assets without losing control of them?
By making sure no single party ever holds a complete key. The Vault approaches this through a hybrid model: the signing key for a wallet is split into shares held by separate parties, so no single party, not the office, not an adviser, not The Vault, ever holds enough of the key to move funds alone. In practice, this usually means the principal holds one share on a hardware-backed device and can veto any material movement, the office or its adviser holds a share for day-to-day operations within an agreed mandate, and The Vault holds a share as the regulated party, applying compliance checks on every transaction. A movement only goes through when enough of these parties agree.
Each family or mandate gets its own segregated wallet, with clean, individual reporting rather than funds pooled together.
How does control pass to the next generation?
In measured steps rather than all at once or not at all. The next generation can start with read-only visibility into holdings, then receive a share and signing rights over time, so stewardship transfers gradually, on the family's schedule, without a single handover moment that everything depends on.
Does the family stay free to change its setup later?
Yes. Families that want to be operational quickly can start with a managed setup and nothing to deploy, while offices with their own technical team can run the same model on their own infrastructure. Either way, the family retains the option to move to full self-custody at any point, since no party in this structure can hold that choice back from them.
If you're thinking through how to bring digital assets under the same governance as the rest of the family's wealth, contact us. We're happy to answer your questions and book a demo for you.
Frequently asked questions
Can a provider freeze a family office out of its own digital assets?
Not in a structure where the signing key is split into shares held by separate parties. No single party, including the custody provider, holds enough of the key to move or block funds alone, and the signing threshold can be met without any one party's participation.
What happens if a key holder dies or loses their device?
The structure survives it. Because signing requires a threshold of shares rather than any specific one, the remaining parties keep access, and the lost share can be reissued. No individual death, departure or lost device can lock the family out.
How are different family members' assets kept separate?
Each family or mandate has its own segregated wallet with individual reporting. Funds are never pooled, so there is always a clean answer to what is held, where, and for whom.
How does a family bring the next generation into digital asset holdings?
Gradually: the next generation can start with read-only visibility, then receive a key share and signing rights over time, so stewardship transfers in measured steps under the family's control.
Can a family office move to full self-custody later?
Yes. The structure is designed so no party can hold that choice back from the family. An office can start with a managed setup and move to its own infrastructure, or to full self-custody, at any point.