PROOFOFCUSTODY
Scores
Incidents
Learn
About
Get the Report
PROOFOFCUSTODY

The independent scoring system for Bitcoin custody. Every platform scored and ranked.

$1B+ in assets under custody expertise

No spam. Unsubscribe anytime.

PLATFORM SCORES
All ScoresCompareMethodologyIndependence StandardDataCustody Assessment
LEARN
Bitcoin 101Custody GuidesCustody InsuranceIs Your Setup Safe?Custody TimelineIncidentsFAQQuiz
COMPANY
AboutAuthorsEditorial IndependenceChangelogCorrections
RESOURCES
PodcastPressReport
CONNECT
Twitter / XLinkedInYouTubehello@proofofcustody.io
2026 Proof of Custody. Published by Onramp Bitcoin. Editorial Independence.PrivacyTermsproofofcustody.io
Custody fit · rules 0.1 (1 Nov 2026)

Which custody model fits your situation?

If your spouse cannot run a hardware wallet, what do you need? The answer is a custody model before it is a company. Answer what you can; every question is optional and nothing you enter is stored.

Two rules run before anything is ranked. The recovery floor: no model may demand more than the least capable person who must recover can do. The exposure ceiling: above 10 BTC, any setup where one device, company or person can lose the coins is flagged. Every rule that fires is shown. Methodology.

Start over

Proof of Custody is published by Onramp Bitcoin, which appears here where its custody model fits and is scored by the same methodology as every other platform.

These are custody models that fit the situation described, by Proof of Custody's published rules, version 0.1 (1 Nov 2026). They are not a recommendation to buy, sell, move or hold anything, and not legal, tax or estate advice.

Models, by how well they fit what you described

Exchange or single-custodian account

One company holds the keys; you hold a claim on the company.

fits · 70/100
  • The recoverer works with identity documents and institutions, not devices.

What the recoverer must do: Prove identity and, for an estate, present letters of administration to the company's support desk.

Platforms running this model, by published score
River82/100SPOFSwan Bitcoin80/100SPOFFidelity Crypto74/100
SPOF
Strike74/100SPOF
Strike (Global)70/100SPOF
Cash App69/100SPOF

Spot bitcoin ETF

A fund holds the bitcoin at a custodian; you hold shares in a brokerage account.

fits · 70/100
  • The recoverer works with identity documents and institutions, not devices.

What the recoverer must do: The brokerage's beneficiary or estate process; no keys involved.

Platforms running this model, by published score
iShares Bitcoin Trust (IBIT)77/100SPOFFidelity Wise Origin (FBTC)76/100SPOFBitwise Bitcoin ETF (BITB)74/100SPOFARK 21Shares (ARKB)70/100SPOFFranklin Bitcoin ETF (EZBC)70/100SPOFGrayscale Bitcoin Mini (BTC)69/100SPOF

Qualified custodian

A regulated institution holds keys in segregated accounts under a legal framework built for it.

fits · 70/100
  • The recoverer works with identity documents and institutions, not devices.

What the recoverer must do: Identity and authority documents to the custodian; the custodian's own succession procedure.

Platforms running this model, by published score
Onramp Finance89/100SPOFpublisherFidelity Digital Assets76/100SPOFChoice by Kingdom Trust73/100SPOFChoice by Kingdom Trust73/100SPOFBitGo71/100SPOFSygnum70/100SPOF

Multi-institution custody

Separate institutions each secure a key under their own ceremony; it takes more than one of them to move funds.

fits · 70/100
  • The recoverer works with identity documents and institutions, not devices.

What the recoverer must do: Identity and authority documents to the institutions; no device, seed or ceremony on the heir's side.

Platforms running this model, by published score
Onramp90/100publisherOnramp Lending83/100publisher

Collaborative multisig

You hold most keys, the provider holds one, and no single party can move funds alone.

excluded
  • Recovery floor: this model requires the recoverer to run a hardware wallet and handle a seed phrase, and the person you named cannot be expected to.

Self-managed multi-vendor multisig

You build and run the quorum yourself, across devices from different vendors.

excluded
  • Recovery floor: this model requires the recoverer to run a hardware wallet and handle a seed phrase, and the person you named cannot be expected to.

Single-signature hardware wallet

One device, one seed, entirely yours.

excluded
  • Recovery floor: this model requires the recoverer to run a hardware wallet and handle a seed phrase, and the person you named cannot be expected to.

Tests to run on any provider you shortlist

  • non-technical-spouse: The person who must recover should not have to touch keys.
  • no-hardware: No hardware device on the holder's side.
Share or reuse this result
https://proofofcustody.io/fit?recoverer=spouse&capability=none

Same inputs, same answer, for anyone. As JSON: /api/fit. For an agent: the fit_custody_setup tool on the MCP server.