Institutional-grade custody platform

On-premise digital asset custody with policy engine, threshold-based key protection, and full market connectivity.

Secure custody. Full control.

Custody platform that stores private keys, interacts directly with the blockchain, and handles on-chain deposits and withdrawals — all on-premise with zero external influence.

Secure key storage

Locally launched key storage

On-premise only

No external influence or unauthorized access

Direct blockchain interaction

Operations happen directly on-chain

Full sovereignty

Whoever owns the keys, owns the crypto

Deposits & withdrawals

Full transaction management

Secure key storage

Locally launched key storage

Direct blockchain interaction

Operations happen directly on-chain

Deposits & withdrawals

Full transaction management

On-premise only

No external influence or unauthorized access

Full sovereignty

Whoever owns the keys, owns the crypto

Client

Vault Unit

Custody

Blockchain / CEX / DeFi / KYT

Client

Custody

Blockchain / CEX / DeFi / KYT

Vailt Unit

Custody built around client-side control

Self-custody architecture

Keys are generated, stored and used exclusively on the client's hardware.

On-premise policy engine

Policies, validation and signing stay on the client side.

Threshold-based protection

No single key or operator becomes a single point of failure.

Built for institutions

2000+ assets, 40+ blockchains and 15+ exchanges.

Full market connectivity. One custody layer.

98%

Market cap coverage

40+

Blockchains

2000+

Assets supported

15+

Exchanges

98%

Market cap coverage

40+

Blockchains

2000+

Assets supported

15+

Exchanges

Blockchains

Bitcoin

Ethereum

Tron

BSC

Polygon

Solana

Avalanche

Arbitrum

Optimism

Cosmos

Token Standards

ERC-20

TRC-20

SPL

BEP-20

Capital Utilization (DeFi)

Compound

AAVE

Lido

Staking

Lending

Borrowing

Exchanges

Binance

Huobi

Bitfinex

KuCoin

Kraken

Gate.io

Issue tokens — create, manage, control at every step.

Deploy token smart contracts from templates with multi-operator approval. Vault Unit validates ACL, signatures, and policies before signing any transaction.

Select a token smart contract from templates

Request deployment with multi-operator approval

Operators validate on their physical devices

Vault Unit: ACL → Signatures → Policies → Signing

Mint, burn and manage token supply

Set custom rules and policies per token

Threshold-based key protection with zero single point of failure.

Mnemonic is mathematically split into N shares. Any M shares can recover it — but (M-1) shares reveal nothing.

Theft-proof

Compromised shares are useless below the threshold — no single point of compromise

Custody-independent

Self-recover without relying on any custody provider — full sovereignty over your keys

Loss-intolerant

Lose up to (N-M) shares without losing access to your keys or assets

Recoverable

Regenerate new shares anytime if any is compromised or lost

Fully on-premises secure software installed on client side.

Vault Unit is a highly secured software for policy engine, signing and key storage. User ACl → Signatures → Policies → Transaction signing.

Keys never leave client premises

Private keys are generated, stored and used exclusively on the client’s own hardware

Policies securely stored and validated on client side

All policy rules live on-premises — no external calls for validation

Vault Unit validates and signs the transaction

ACL, signatures and policies checked before any transaction is signed

VAULT UNIT

User ACL validation

Signatures validation

Policies validation

Transaction / Config changes signing

Enforce roles, limits & verified-address withdrawals.

Add new payment methods without changing the core processing engine.

Withdrawals only to verified, whitelisted addresses

Configurable transfer limits per period and per project

Role-based access control for al operations

Multi-admin approval for any policy change

All policies securely stored on client hardware

Battle-tested resistance to hacks and human mistakes.

Risk

Control

... manager mistakenly withdrew a larger amount of assets?

Withdrawal limits per period catch the error before funds leave the vault

... dishonest manager withdraws to an unverified address?

Address whitelists block any transfer to addresses not pre-approved by admins

... market volatility results in a significant increase in fee amounts?

Fee limits automatically block high-cost transactions, protecting from overspending

Admin roles for policy change approvals.

Jake requested changes in manage,ent team permissions. To be implemented, changes require validation from 2 admins — with cryptographic signing on each approval.

Different user roles for requesting and approving policy changes

Policy modifications require cryptographic approval by admin roles

All policies securely stored on the client’s hardware

Comprehensive audit logs of policy changes and transactions

Settings changes and transfer approvals tracked separately

Every transaction follows a controlled path.

Operator → App → Vault Unit → Policy Engine + Signer → Custody → Blockchain

Policy-enforced transaction flow

Operator 1 requests and confirms on physical device

Platform routes to Operators 2 and 3 for validation

Each operator validates on their own device

Approvals sent to Vault Unit for signing

Vault Unit: ACL → Signatures → Policies → Signing

Signed transaction broadcast to blockchain

Custody transaction flow

Manage funds: from millions of deposits to instant payouts.

Receive deposits from millions of clients through pay-in addresses. Aggregate liquidity while saving on gas. Access funds instantly when operations require it.

Receive deposits from millions of client addresses

Gas fan: token distribution for gas fees

Collect funds when network fees are low

Liquidity aggregator: on-demand liquidity

Pay-out wallets, cold storage, custom workflows

Integrated or third-party payout processing

Automate day-to-day ops: triggers, thresholds & scheduled actions

Rule

Trigger

Source

Dest

Asset

Fee limit

Auto-collection

Storage <10 ETH

Pay-ins

Storage

ETH

Max available

Balance top-up

Liquidity < min

Reserves

Liquidity

USDT

Δ to min

Scheduled sweep

Daily 00:00 UTC

Hot wallet

Cold storage

All

Full balance

0.5%

Gas-optimized collect

Gas <20 gwei

Pay-ins

Storage

ETH

Max available

Rule

Trigger

Source

Dest

Asset

Fee limit

Auto-collection

Storage <10 ETH

Pay-ins

Storage

ETH

Max available

Rule

Trigger

Source

Dest

Asset

Fee limit

Balance top-up

Liquidity < min

Reserves

Liquidity

USDT

Δ to min

Rule

Trigger

Source

Dest

Asset

Fee limit

Scheduled sweep

Daily 00:00 UTC

Hot wallet

Cold storage

All

Full balance

0.5%

Rule

Trigger

Source

Dest

Asset

Fee limit

Gas-optimized collect

Gas <20 gwei

Pay-ins

Storage

ETH

Max available

Trigger-based: define trigger, source, destination, asset, amount and fee parameters

Threshold monitoring: automated execution when conditions are met

Fee controls: each rule includes a fee percentage limit to block overspending

Reduce transactions costs by 30%

Smart contract optimization

Proprietary smart contract wallets designed to reduce network fees by up to 30%

Fee-free via staking rewards

Staking rewards can fully offset network fees — enabling zero-cost transfers

Batch transfers = one gas fee

Multiple transfers combined into a single on-chain transaction — gas is paid only once

Fee overspend control

Custom fee limits block high-cost transactions — protecting from overspending during volatility

Stay compliant: reporting, KYT, travel rule

Detailed reporting

Easy access to all transactions and user activity — filtered by accounts and time

Read-only auditor access

Dedicated read-only roles for auditors to ensure transparency without operational risk

User monitoring

Comprehensive user activity tracking across all operations and policy changes

KYT integration

Transaction monitoring to risk-score deposits and flag suspicious on-chain activity

Travel Rule compliance

Transmit originator and beneficiary information, retain required records per jurisdiction

API data access

Downloaded data via API for integration with BI tols — real-time account balance tracking

Battle-tested institutional-grade custody — with client-side control by design

Self-custody architecture

Client-controlled signing and recovery model — keys never leave your premises

On-prem policy engine

Policy storage and validation on the client side — no external dependencies

Broad connectivity

40+ blockchains, 2000+ assets, 15+ exchanges — continuous integration of new protocols

Cost optimization

Smart contracts, batch transfers, staking rewards, fee limits — reduce costs by 30%

Compliance built-in

Reporting, KYT, travel rule, audit logs and read-only auditor access

Automation engine

Triggers, thresholds, scheduled actions — automate collection, balancing and settlements

Launch your fintech product — faster than you thought possible

Join companies already building with FinHarbor
in markets across Europe, MENA, and beyond

Thank you for  your request

We’ll return to you with the answer as soon as possible.

Send a new request

These fields are required