Bitcoin Custody Models for Family Offices
Before a family office holds Bitcoin at scale, it has to choose how that Bitcoin is held. The choice is not only about security. It is about who controls the asset, how succession works, and how much institutional dependency you reintroduce.
Four models dominate the conversation: spot ETF, institutional custodian, self-custody, and collaborative multisig. Each has a real strength and a real trade-off.
Important
This is technical education and support for self-custody Bitcoin solutions only: not financial, investment, tax, or legal advice. Bitcoin carries high risks including total loss.
The Real Question Is Control, Not Just Custody
Traditional assets sit inside institutions that can freeze, reverse, and reissue. Bitcoin is a bearer asset: whoever controls the keys controls the asset, and there is no institutional reset button. That makes the custody model a governance decision, not just an operational one.
For a family office, the questions that matter are simple: Can the family verify holdings independently? Can any single party move funds alone? What happens at incapacity or succession? The four models answer those questions very differently.
The Four Custody Models
| Model | Strength | Weakness |
|---|---|---|
| ETF | Familiar, simple reporting, sits inside existing brokerage and tax workflows. | No direct Bitcoin control. You own a security, not the asset, cannot transact on-chain, and do not solve key control or inheritance readiness. |
| Institutional custodian | Professional custody infrastructure and insurance, low day-to-day operational burden. | Reintroduces institutional dependency and counterparty risk. The family may have beneficial ownership, but not direct technical control of the keys. |
| Self-custody | Maximum sovereignty and direct control with no intermediary. | High operational, succession, and incapacity burden. Often concentrates knowledge in one person. |
| Collaborative multisig | Shared control and resilience. No single point of failure, with documented roles and recovery. | Requires process, documentation, periodic review, and disciplined signing procedures to run well. |
There is no single correct answer for every family. The right model depends on size, time horizon, governance maturity, and how much institutional dependency the family is willing to accept.
How to Choose the Right Model
The right custody model depends on what the family is optimizing for: reporting simplicity, institutional delegation, maximum sovereignty, or resilient control across people and generations.
- Choose ETF exposure when operational simplicity matters more than direct Bitcoin control.
- Choose institutional custody when professional delegation and reporting are the priority.
- Choose self-custody only where the family has strong technical capability and succession discipline.
- Choose collaborative multisig when the family wants direct control without single-person fragility.
Collaborative Multisig, Without the Single-Person Risk
The Bitcoin Adviser is not an institutional custodian and does not hold or safekeep client Bitcoin. We specialise in collaborative multisig for families that want control without single-person fragility. The family or entity holds keys; we provide vault design, an authorised co-signing role, documentation, and continuity.
- The family holds keys. We are a co-signer and adviser within your multisig, not a custodian of your coins.
- No unilateral control. No single person, including us, can move funds alone.
- Documented and recoverable. Roles, approvals, and recovery steps are written down and rehearsed.
See how this works in practice: Collaborative Security and Key Agent, not custodian. Before proceeding, review our Scope & Risks.