Soft gradient background blending light purple in the top left, blue at the top right, and fading into creamy white at the bottom.
Solutions · Wallets & digital custody

A secure custody stack under your operational control

A fully featured MPC wallet stack you deploy in your own cloud or data center.
‍
Built for banks, custodians, prime brokers and other financial services institutions that require NIST CSF-level security and controls, backed by SOC 2 and ISO 27001 certification.

Talk to our team
The challenge

Meet client demand at digital speed, without giving up control.

Digital assets run on networks that never close, change often, and generally cannot reverse a signed transaction. Clients want new assets and networks quickly. Your standards for control, security and audit cannot be compromised.

How do you keep pace with demand while your keys, rules and infrastructure stay under your own control?

Control inside your perimeter

Keys, policies and wallet operations need to run in your own cloud or data center, under your exclusive control. Renting them from a vendor is a risk many institutions cannot accept.

Rules that cannot be bypassed

Approval rules need to be enforced where transactions are signed. On secured hardware and not in the application layer where they can be easily bypassed.

Segregation and account structure

Assets need compliant segregation by client, desk or entity. Account and sub-account structures should match how your institution actually operates, across hot, warm and cold storage.

Security you can defend in due diligence

Risk and security teams expect hardware-secured signing, no single point of compromise, and infrastructure that has been proven at scale.

Reporting and audit trails

Compliance teams should not have to assemble evidence by hand. Every action, approval and balance needs to be recorded and available on demand.

How Blockdaemon solves it

Dedicated. Composable. Governed.

A dedicated wallet stack made of composable components. Adopt them together, or one at a time as your needs grow.

explore transaction services

Composable wallet infrastructure

Take what you need: the MPC signer, the policy engine, transaction crafting or the approver app. Each can be deployed on its own and added to later without redesign.

Dedicated to your institution

No asset pooling and no shared keys. Run it inside your perimeter, or on dedicated infrastructure operated by Blockdaemon.Learn More

No single point of compromise

With MPC, your private keys never exist in one place and never reconstructed. Each MPC node runds in dedicated secure enclaves.Learn More

Approver app

Approvers see a clear, readable view of every transaction before they sign. Initiators cannot approve their own transactions under any account configuration, and every approval is time-stamped in the audit trail.

Multiple networks, every storage tier

Support for the major networks your institution uses, with hot, warm and cold wallets under one policy framework.

Reporting & data

A full audit trail and reporting data covering balances, transaction history and approvals, available on demand for internal audit and regulatory review.

Control and sovereignty

Your keys, your rules, your infrastructure.

Regulated institutions must own their keys, policies and the infrastructure they run on, and show auditors exactly how. Renting control from a vendor is a risk many cannot accept.

Compare deployment options

Deploy where you decide

Run the full stack in your own cloud or data center, on dedicated Blockdaemon infrastructure, or as a managed service.

No pooling, no shared keys

Every deployment is dedicated to your institution.

Rules enforced at signing

Approval policies are enforced at the cryptographic layer, not only in an interface where they can be worked around. Initiators cannot approve their own transactions under any account configuration.

A clear exit

[CONFIRM: source-code escrow or other exit arrangement for client-operated deployments]

Deployment options at a glance

Option
Who operates it
Where keys are generated and held
Client infrastructure
Your team
Inside your perimeter
Dedicated Blockdaemon infrastructure
Blockdaemon
[CONFIRM]
Managed service
Blockdaemon
[CONFIRM]

Proof

[CONFIRM: a bank or custodian running a client-operated deployment, if it can be named]

Security

Defensible in due diligence.

Risk and security teams expect hardware-isolated signing, no single point of compromise, and infrastructure proven at scale.

Review the Trust Center

MPC key management

No single party holds a complete key. Signing runs in hardware-isolated secure enclaves. [CONFIRM: enclave technology, so security teams can assess it]

Segregated key control

Keys are separated per account and sub-account, and generated and held within your perimeter.

Every storage tier

Hot, warm and cold wallets under one policy framework. [CONFIRM: air-gapped cold storage option]

Recovery you can test

[CONFIRM: key backup, recovery and disaster recovery process, and whether clients can rehearse it]

Proof

SOC 2 and ISO 27001, with the Trust Center linked here and not only in the footer. [CONFIRM: independent penetration test summary, and a scale figure such as assets or transactions secured, if it can be published]

Trust

Evidence for auditors, regulators and clients.

Compliance teams should not assemble evidence by hand. Every action, approval and balance must be recorded and available on demand, and assets must be segregated the way your institution is organized.

See a governed transaction, end to end

Maker-checker with a full audit trail

Approvers see a readable view of every transaction before signing, and every approval is time-stamped.

Account structures that mirror your institution

Segregate by client, desk or entity, with account and sub-account structures across hot, warm and cold storage. [CONFIRM: example hierarchy, and which segregation requirements it supports, such as client-asset rules]

Reporting on demand

Balances, transaction history and approvals in a single format across networks, ready for reconciliation and regulatory reporting.

Fits your systems

[CONFIRM: export formats and integrations with core banking, treasury, accounting, SIEM and GRC tools]

Proof

Run a governed transaction in the sandbox and see the audit trail it produces.

Operations

Operational excellence at speed.

Digital assets run around the clock across many networks. Clients expect new assets and networks quickly, and your operations cannot trade rigor for speed.

Explore networks

Composable stack

Adopt the MPC signer, policy engine, transaction crafting and approver app together or one at a time, and add to them later without redesign.

Many networks, one framework

Support for the major networks your institution uses, under one policy framework. [CONFIRM: number of networks, and how and how fast a new one is added]

Blockdaemon runs the network layer

Dedicated nodes, native RPC, event streaming and historical data APIs, so your team does not operate blockchain infrastructure.

Gas handled

Blockdaemon can manage gas for you. [CONFIRM: how this works when keys are client-held]

Always on

[CONFIRM: 24/7 support, incident response and uptime commitments]

Proof

[CONFIRM: supported networks list and uptime history]

Tokenized assets

Custody that extends to tokenized assets.

Clients want to hold and move tokenized deposits, securities and collateral, not only crypto assets. Custody has to work with the networks where those assets are issued and settled.

Explore tokenization and ecosystems

One stack, every asset type

The same wallet stack supports institutions taking part in Blockdaemon's ecosystems, including DTCC, LSEG and JPMorgan Kinexys.

Roles across the lifecycle

Take part as participant, issuer, investor or custodian. [CONFIRM: which custody roles and asset types are live in each ecosystem]

Proof

DTCC ecosystem stated as live in production on the ecosystems page. [CONFIRM: evidence]

Platform elements

What powers this solution.

Wallets and digital custody run on the Blockdaemon Institutional 360 Platform.

Deployment flexibility

Run it on client infrastructure inside your security perimeter, on dedicated Blockdaemon infrastructure, or as a managed service.

deployment options

MPC Key Management & Approval Policies

MPC-secured custody across hot, warm and cold configurations. Signing runs in hardware-isolated secure enclaves, and approval policies are enforced at the cryptographic layer.

transaction services

Chain data & reporting

Event Streaming and Historical Data APIs deliver balances, transactions and audit records in a single format across networks, ready for reconciliation and regulatory reporting.

Data Services
get started

See a governed transaction, end to end

Run a complete wallet workflow in a sandbox environment. Initiate a transaction, route it through maker-checker approval, and see the audit trail produced, exactly as it will work in your live environment.

Select all that apply

By clicking ‘Submit’, you agree to share your information with Blockdaemon to receive marketing, updates, and other emails. Use the unsubscribe link in those emails to opt-out at any time.

Thanks for submitting the form.