CryptolicensePowered by Paralex
  1. Home
  2. Crypto licensing
  3. Digital asset custody

Digital asset custody

Holding client assets is one of the most sensitive parts of any model. We determine the legal status of custody and prepare the procedures and the technical perimeter.

KZ: classified by modelAIFC: under AFSA rules
Who it is for

For projects where the company holds client assets or keys

  • exchanges and exchangers with a custodial model
  • projects planning a standalone custody service
  • digital financial asset platforms
  • fintech apps with built-in wallets
  • companies choosing between in-house and external custody
  • investors assessing custody risk
Regulatory questions

What determines the status of custody

  1. 01

    Who controls the keys: the company, the client or an external provider

  2. 02

    Is custody a standalone service or part of exchange, trading or a platform

  3. 03

    How client assets are segregated from the company's assets

  4. 04

    What the recovery, signing and access control procedures are

  5. 05

    Who is liable in case of loss or compromise

  6. 06

    Which information security and reporting requirements apply

Regimes

How the question is answered under each regime

Kazakhstan · national regime

Assessed within the core model

  • the Law of Kazakhstan on Digital Assets treats safekeeping as part of the circulation of digital assets
  • digital asset service providers are exchange operators, trading platform operators and digital financial asset platform operators
  • for digital financial assets the law provides for recording and safekeeping on the platform and for underlying asset custodians
  • a standalone custody service requires separate analysis of the model
Kazakhstan · AIFC / AFSA

AFSA rules

  • digital asset custody in the AIFC is governed by AIFC law
  • the applicable regulated activity is determined under the current AIFC Rules on Digital Asset Activities
  • client asset segregation requirements are part of the rules for providers
Other jurisdictions

Assessed on request

  • custody is a separate activity in many jurisdictions
  • capital and insurance requirements differ
  • analysis is done with local counsel

How an activity is classified depends on the actual model: who is the client's counterparty, where assets and keys are held, how settlement works, who the services are for. Information is current as of October 2026 and is confirmed during the project assessment.

Preparation

Three workstreams on one project

Lawyers

Legal preparation

  • classification of the custody model
  • custody agreements and user terms
  • client asset segregation policy
  • key access, signing and recovery procedures
  • agreements with external custody providers
  • AML/CFT and travel rule for transfers
Finance

Financial preparation

  • costs of in-house or external custody
  • custody fee model
  • reserves and operational risk assessment
  • information security budget
Engineers

Technology

  • custody architecture: hot and cold wallets
  • role separation and multi-party authorisation
  • integration with an external custody provider
  • balance reconciliation and logging
  • monitoring and incident response
Stages

Stages and deliverables

  1. 01

    Model assessment

    Custody status and requirements defined

  2. 02

    Architecture

    Model chosen: in-house, external or mixed custody

  3. 03

    Documents and processes

    Policies, contracts, access procedures

  4. 04

    Technical implementation

    Wallets, roles, reconciliations, monitoring

  5. 05

    Regulatory stage

    Custody reflected in the core licence or registration application

  6. 06

    Ongoing support

    Access reviews, procedure updates

The sequence depends on the regime. Some work runs in parallel, but regulated activity starts only after the required permits are obtained.

Format

A single workstream or a full project

Single

Order one workstream

Separately: custody model classification, asset segregation policy, key procedures, provider selection, technical architecture.

Full scope

Turnkey launch

Full scope: custody is built into the overall exchange, trading or platform model and runs through all documents and systems.

Turnkey launch

Cost and timing are set after the project assessment.

FAQ

Frequently asked questions

Describe your project in a few sentences. We will give you a substantive reply: which questions need answering and where to start.

Discuss your project
Is a separate custody licence needed in Kazakhstan?

Under the national regime the question is answered by analysing the core model and the statuses provided by law. We give our view after assessing the specific structure.

Can we use an external custodian?

Often yes, but liability to clients and the regulator stays with the company. The agreement and provider oversight procedures must reflect this.

Contact

Tell us about your project

We will review the description and give you a substantive reply: which regime may apply and where to start.

Prefer e-mail? Write to us directly.info@paralex.kz

Powered by Paralex

Services needed

We reply to the contact you provide.