Self-Custody For A Company Is Not Self-Custody For A Person

Personal custody is simple on paper. One person. One wallet. One backup they do not lose. A company is not one person. People quit. Phones break. The person who “knew the wallet” takes Friday off and does not answer.

If money moves only when one employee says so, you do not have a treasury. You have a single point of failure with a logo on it.

We configure wallets. We do not hold them. The SEC’s Office of Investor Education issued Crypto Asset Custody Basics for Retail Investors on December 12, 2025. Wallets store keys, not coins. Self-custody means you manage those keys. Third-party custody means someone else controls access. Never share the backup phrase. That bulletin is written for people. A business still has to answer who signs, who has a spare, and what happens if both of those people are unavailable on the same day.

Treat it like the checkbook. You already know how to think about this. Who can sign. Who has a spare. What happens if someone is out. Federal guidance on managing keys in an organization — NIST SP 800-57 Part 2 — says the same thing in denser language: roles, inventory, recovery. You do not need to become a cryptographer. You need a policy a new hire can follow.

You can require more than one person before money moves. Two-of-three is the version most shops understand. One key on a hardware device in the office. One with an officer. A third copy in a building that is not the office. No single laptop, and no single employee, should be enough.

Products that do that job in this stack include Asigna and Fordefi. Leather and Xverse often sit next to them as signing wallets. A Ledger still belongs in the picture as hardware. Fordefi is on the official sBTC bridge path. Naming them is not a recommendation. It keeps the conversation on tools a team can actually open.

Hardware is sold separately. The device is not the policy. The policy is who holds which key, how many signatures you need, and how you replace a person when they leave. Write it on one page. Put it where the books live. Do not put the backup phrase in Slack.

We will never ask for a backup phrase, a private key, or a screen-share of either. If someone claiming to be Block9 does, stop and write support@block9.app. That rule is in our Terms for a reason.

What we will do is sit with the people who actually run the books and walk through daily wallet versus savings wallet versus company wallet until the team can use it without us in the room. Orange Case is the onsite version of that walk-through. Both bitcoin classes, hands-on cold storage, on a Ledger you provide, with a steel backup. Travel extra. Still your keys.

How many people can move funds today, and on what device? Where does the backup live, and who else knows? If the primary signer is unreachable for a week, what happens? Answer those before you hire anyone for this, including us.

We help U.S. shops do this without turning the owner into a technician. You keep the keys.

Talk with AgentB9 on block9.app. Call or text (636) 224-8069. sales@block9.app.

A chain is not a bank portal or a card processor. Payments can be slow, hard to reverse, or lost if a key, a device, or a backup is mishandled. Apps, wallets, and protocols change. We help you set things up; we do not hold your keys or watch your systems after you leave. Security, backups, and day-to-day practice stay with you. This is not legal, tax, or investment advice.

Sources

• SEC Investor Bulletin, Dec. 12, 2025
• NIST SP 800-57 Part 2
• Block9 Terms §4.1
• Asigna
• Fordefi