What is a qualified custodian? The institutional bar for digital assets

A qualified custodian is a regulated entity that is legally authorized to hold client assets on behalf of others. In practice that means banks (including qualifying trust companies), registered broker-dealers, and registered futures commission merchants, alongside certain regulated foreign financial institutions. The category exists to make sure client assets are held by someone supervised, not by the manager who is also making investment decisions.

Under the US Investment Advisers Act, advisers who have custody of client funds and securities are generally required to keep those assets with a qualified custodian. The intent is separation: the party that controls the assets should be distinct from the party that trades them, and it should be subject to its own regulatory oversight.

For digital assets, the same bar applies, but meeting it is harder. The question is no longer just whether a custodian is licensed, but whether it can prove what it holds and demonstrate that client assets are genuinely segregated.

Why it matters for institutions and funds

The qualified custodian requirement is what lets a fund tell its investors, auditors, and regulators that client assets are protected from the manager's own failures. If the manager goes insolvent or behaves badly, client assets held with an independent regulated custodian are meant to stay client assets.

For an allocator deciding whether to invest, the custody arrangement is often the first diligence question. A fund that cannot point to a credible qualified custodian is difficult to underwrite, regardless of its strategy. For the institutions themselves, using a qualified custodian is frequently a precondition for offering a regulated product at all.

What separates a real one

Licensing is the entry ticket, not the whole test. A serious qualified custodian for digital assets demonstrates control across several areas:

• Asset segregation. Client assets are held separately, not commingled in an omnibus pool where one client's holdings are indistinguishable from another's.
• Proof of reserves. The custodian can show that the assets it claims to hold actually exist and correspond to client balances.
• Key management. Signing keys are protected with hardware security modules and multisignature schemes, so no single person or device can move assets alone.
• No rehypothecation. Client assets are not lent out, pledged, or reused without explicit authorization. The strongest version of this is enforced by architecture, not just by policy.
• Audited controls and reporting. Operations are subject to independent examination, and clients receive reporting they can reconcile.

The weakness in many offerings is that several of these reduce to a written promise. The custodian asserts segregation and reserves, and the client trusts the assertion.

How verifiable infrastructure raises the bar

Digital assets make it possible to replace some of those promises with proof. When custody runs on a public ledger, segregation and reserves can be observable properties rather than attestations.

The difference is between a custodian that tells you assets are segregated and one that can show you, on-chain, that they are.

Blockstream Enterprise is an HSM-based custody platform built on the Liquid Network, an open-source Bitcoin sidechain in production since 2018 and run by a federation of more than 80 members. Its custody model is designed around verifiability:

• Per-client UTXO segregation. Each client's assets sit in distinct on-chain outputs rather than an omnibus account, so segregation is structural.
• On-chain proof of reserves. Liquid's Confidential Transactions hide amounts and asset types publicly, but blinding keys allow selective disclosure, so a custodian can prove reserves to an auditor or regulator without broadcasting balances to the world.
• Strong key management. 2-of-2 and 2-of-3 multisig with hardware and HSM signing, including Blockstream Jade, means assets cannot move on a single compromised key.
• No rehypothecation by architecture. The custody design does not depend on trusting that assets stay put. It is built so they do.

The platform supports full-custody, hybrid, and self-custody arrangements, so an institution can match the model to its regulatory posture.

What to ask a prospective custodian

When evaluating a custodian, push past the marketing and ask for evidence:

• Under what regime are you licensed, and what client-asset protections does it require?
• Are my assets segregated per client, or held in an omnibus account?
• How do you prove reserves, and can you demonstrate it to my auditor?
• How are signing keys held, and can any single party move assets?
• Are client assets ever rehypothecated, and is that prevented by policy or by design?
• What independent examinations cover your controls, and what reporting will I receive?

The answers separate a custodian that meets the legal definition from one that can actually back it up.

The takeaway

A qualified custodian is the institutional bar for holding client assets, and for digital assets that bar now includes proof, not just licensing. Segregation, reserves, key management, and the absence of rehypothecation should be things a custodian can demonstrate. Verifiable infrastructure makes that possible.