The two models
Self-custody puts the owner in full control of their private keys, typically through a hardware wallet or a multisig. There is no third-party custodian and no counterparty to trust — but the owner carries the entire operational burden: securing keys, managing backups, handling key-person risk, and maintaining signing discipline.
Institutional custody places assets with a regulated custodian that provides professional key management, segregation, and legal protections. The owner gives up direct key control in exchange for safekeeping that an institution can put in writing for its board and auditors.
How they compare
| Consideration | Self-custody | Institutional custody |
|---|---|---|
| Who holds the keys | You | A regulated custodian |
| Counterparty risk | None | The custodian (mitigated by regulation and segregation) |
| Operational burden | High (on you) | Low (handled by the custodian) |
| Segregation & bankruptcy-remoteness | Not applicable | Yes, under the custodian's legal framework |
| Auditor / board acceptance | Often insufficient | Designed for it |
| Best for | Individuals, self-sufficient teams | Foundations, funds, issuers, regulated entities |
When each makes sense
Self-custody is appropriate when the holder has the security expertise and operational discipline to manage keys, and no external party requires a supervised custodian. Institutional custody becomes necessary when an organisation answers to others — a board demanding a regulated name on the custody line, an auditor needing acceptable statements, or an investor agreement mandating institutional safekeeping.
How Panthea handles both
Panthea offers two custody models so organisations can match custody to their mandate: client-controlled self-custody (the non-custodial model TrustSwap is known for) and institutional custody with assets held by Blockfort in segregated Swiss custody.