How companies store Bitcoin
Professional models between governance, risk and control
Bitcoin is becoming increasingly relevant for companies – as a strategic reserve, as a hedge or as part of modern treasury structures. However, a central question arises at the latest with the first Bitcoin position: How do companies store their Bitcoin securely, in compliance with regulations and in an organizationally sensible manner?
This is no longer about the technical details of individual wallets. Bitcoin custody is primarily a governance, risk and process issue. The focus is on control, liability, internal approvals, compliance and auditability.
In practice, three basic custody models have become established – often in combination.
1. professional custodians
Many companies rely on regulated crypto custodians, banks or specialized custody service providers. In this model, the private keys are held entirely by an external provider.
Why companies choose this model:
-
Clear responsibilities and liability structures
-
Fulfillment of internal and external compliance requirements
-
Good auditing, reporting and accounting skills
Suitable for:
Companies with a strong focus on regulation, formalized processes and external auditability – especially in regulated industries or with larger volumes.
2. multisignature self-custody
With the multi-signature approach, several keys are required to release a transaction. These keys can be distributed across different roles or devices – such as management, finance and a backup mechanism.
Why companies choose this model:
- No single point of failure
- Clear internal approval and control processes
- High level of safety with simultaneous self-monitoring
Suitable for:
Bitcoin-savvy companies with appropriate internal expertise, clear responsibilities and a willingness to take on responsibility themselves.
3. hybrid models
Hybrid models combine external storage with in-house key control. Typical examples are 2-of-3 multisig setups, where one key is held by the company, one by the custodian and one as a backup.
Why companies choose this model:
-
Balance between control and protection
-
Reduction of operational and personnel risks
-
Good scalability with growing Bitcoin exposure
Suitable for:
Growing companies that strategically hold Bitcoin but do not want to fully outsource or be solely responsible for everything.
The decisive insight
Today, companies no longer ask the question:
“Which wallet is the best?”
Instead:
“Which custody structure suits our processes, risks and responsibilities?”
Bitcoin custody is therefore not just an IT issue, but part of the corporate architecture – located between finance, treasury, governance and risk management.
👉 A key follow-up question for every company is therefore:
Where is Bitcoin organizationally anchored – in IT, finance or treasury?
Note: This article was written by a member or author of the Bitcoin Bundesverband and reflects their personal opinion. It does not necessarily represent the official position of the Bitcoin Bundesverband.
