Blog
Why Your Cold Storage Needs a Custody Ledger Separate from Your Security Setup
Cold storage security and custody documentation serve different purposes — and conflating them creates audit risk.
Security teams focus on preventing unauthorized access. Custody documentation focuses on ensuring authorized people can prove what they control, where it is stored, and how to recover it when circumstances change.
These are related but distinct disciplines. We regularly encounter treasuries with excellent air-gapped signing stations and tamper-evident seed storage — but no single document that a new board member could read to understand the custody arrangement.
What a custody ledger contains
A proper ledger maps each offline wallet to:
- The hardware device type and serial number
- The signers authorized to use it (and their current contact information)
- The physical or geographic storage location
- The recovery procedure if a signer becomes unavailable
- The date of last verification
None of this requires recording seed phrases or private keys. The ledger describes the custody arrangement, not the secrets themselves.
The personnel change problem
The most common trigger for our engagements is a signatory departure. When the person who “just knew” how everything was organized leaves, the remaining team discovers that knowledge lived in one person’s head, one encrypted file, or a combination of sticky notes and memory.
A custody ledger survives personnel changes because it is a shared, reviewed, board-approved document — not a personal reference.
Starting point
If you manage more than three offline wallets or have more than two signers, you likely need a formal ledger. Begin with an inventory of devices and storage locations, then engage a documentation specialist or allocate internal time to produce a structured record. The cost of documentation is consistently lower than the cost of reconstruction after a crisis.