Introducing SaaS Custody: The Same MPC and TEE Engine, Cloud-Delivered
The cloud platform runs the same threshold MPC cryptography, hardware-isolated signing and regulated co-signer quorum as The Vault's on-premise deployments, on fixed pricing with no percentage-based custody fees and a guaranteed path to hybrid or on-premise at any time.
The Vault SaaS Custody is a fully cloud-delivered deployment of its institutional custody engine. The platform gives financial institutions, asset managers, family offices, payment providers and digital-asset-native businesses the same cryptography, governance model and policy engine that secure The Vault's on-premise installations, without the time or cost of building and operating that infrastructure themselves.
Institutions entering digital assets have generally had to choose between a third-party custodian, with the counterparty risk that carries, and an on-premise build that takes months. SaaS Custody is available immediately and carries a contractual guarantee that the whole setup can move to hybrid or on-premise at any point. All three deployment models run the same engine, so that migration changes where the platform is hosted without a re-implementation or a new key ceremony.
The architecture is not a cloud adaptation. Keys are split into shares using proprietary threshold MPC, developed by The Vault's in-house research team, and are never assembled in one location. Signing runs inside hardware-isolated trusted execution environments, out of reach of the host operating system and of The Vault's own operators. A regulated entity sits in the quorum on every movement, so no single party, including The Vault, can move or freeze client assets alone. Every wallet is its own instance with no pooling, and approvals, counterparty AML screening and policy checks are enforced before a transaction is signed rather than reconciled afterwards.
That model extends to where institutional risk actually concentrates, which is the moment a person authorises a movement. While most platforms still handle that step through a desktop session or a shared hardware token, The Vault's hardened mobile signer makes each approver an independent participant in the quorum from their own device, with every action cryptographically bound to the session that created it and device-integrity checks run before anything sensitive executes. A treasury team can hold a genuine multi-party quorum without putting every approver at the same terminal.
Institutions have been asked to choose between moving quickly on someone else's infrastructure and moving slowly on their own. That has never been a technical constraint. It suits vendors whose clients cannot leave. SaaS Custody uses the same MPC engine, the same TEE-isolated signing and the same co-signer quorum as our on-premise product. A client can be live this month and can take the whole setup in-house on the day their board or their regulator asks for it.
The Vault SaaS Custody is available immediately to institutional clients globally.