Research methodology

How CustodyProviders.com verifies custody evidence

The objective is procurement-grade transparency: separate custody from infrastructure, cite primary sources, timestamp evidence and leave unknown facts unknown.

1. Entity first

We distinguish a technology brand, exchange, bank and regulated custody legal entity. A group can have multiple roles.

2. Primary sources first

Regulator registers and official charter/licence notices rank above company disclosures. Security and assurance claims link to official trust centers or published reports.

3. Dated evidence

Evidence snapshots show the last review date. Licences, ownership, service availability and assurance reports can change.

4. No inference

If segregation, insurance, SOC/ISO status or licence scope cannot be verified, the field remains unverified instead of being guessed from marketing language.

5. Coverage is not quality

Evidence completeness measures how much current public evidence was found. It is not a safety rating, endorsement or ranking.

6. Procurement confirmation

Buyers should obtain current contracts, licence extracts, assurance reports, insurance schedules, SLAs and insolvency/segregation analysis before onboarding.

Taxonomy

Directory scope

LayerIncludedWhat it does not imply
Custody-category profilesDigital Asset Custodians, Custody Banks, Exchange CustodyDirectory inclusion alone does not prove a current licence or qualified-custodian status.
Custody ecosystemWallet Infrastructure, Tokenization Infrastructure, Compliance & SecurityThese companies are not automatically custodians simply because they support custody workflows.

Corrections and status changes

When a material change is verified, the old claim is corrected rather than silently retained. For example, Finoa is now marked as a historical/status-change profile because its former German custody licence ended effective 31 December 2025.

Current reviewed release: 18 Aug 2026. The current evidence release covers 140 reviewed custody and infrastructure records; unreviewed directory profiles remain discovery records, not current-status attestations.

Regulatory intelligence

Regulatory matrix rules

CustodyProviders.com does not collapse unlike regulatory regimes into a single “regulated” badge. MiCA/CASP authorization, Article 60 bank notification, state trust charters, OCC national trust charters, FINMA bank/CSD supervision, ADGM permissions and Hong Kong TCSP/SFC regimes are recorded separately. Conditional approvals and group/entity ambiguity remain visibly qualified.

Open Regulatory Matrix