Crypto Treasury Structuring in El Salvador
Treasury failures usually come from weak authority controls, informal custody, and reporting that cannot be verified.
- Authority: who can approve buys/sells/transfers (and under what limits).
- Custody: wallet governance, key management, recovery and incident protocol.
- Accounting: discipline for valuation, reconciliations and disclosures.
- Perimeter: avoid drifting into custody/exchange services without controls.
Related: Crypto/Token Legal Opinion • Digital Asset Issuance
- Policy-based allocation limits.
- Authority matrix and segregation.
- Evidence trail and reconciliations.
- Transaction approval limits.
- Counterparty controls and logs.
- Incident and fraud response playbook.
- Board approvals and minutes discipline.
- Disclosure language and risks.
- Audit trail readiness.
- Highest internal control demands.
- Key management and recovery risk.
- Strong evidence trail required.
- Operational burden shifts to partner.
- Need contract and SLA discipline.
- Counterparty risk must be managed.
- Risk segmentation.
- Clear wallet purpose mapping.
- Policy-driven limits per wallet.
If treasury operations drift into custody/exchange services for others, we scope the perimeter and align with DASP where applicable.
- Treasury purpose definition (reserve, payments, hedging, liquidity) and permitted actions.
- Authority matrix: who can approve buys/sells/transfers and under which limits.
- Segregation of duties (request → approval → execution → reconciliation).
- Board/management approvals, reserved matters and documentation discipline.
Goal: decisions are authorized, traceable and reviewable.
- Wallet governance: multi-sig rules, key holders, rotation and secure storage.
- Recovery and incident response: compromise scenarios, freezes, communications.
- Transaction evidence: approvals, on-chain references, reconciliations and archives.
- Vendor contracts (if custody/rails partners): SLAs, reporting, liability and audit rights.
Outcome: controls that partners and auditors can understand.
- No segregation of duties.
- No recovery continuity.
- High fraud/key-loss risk.
- Missing approvals archive.
- No reconciliations cadence.
- No incident handling record.
- Acting as custodian for others.
- Brokerage/exchange-like activity.
- Unmapped partner obligations.
We do not promise approvals. We structure governance and documentation so the treasury can survive scrutiny and operational stress.
- Authority and limits matrix.
- Segregation of duties.
- Exception handling rules.
- Multi-sig and key holder rules.
- Rotation and secure storage.
- Incident playbook and logs.
- Periodic reporting pack.
- Reconciliation cadence.
- Disclosure and notices archive.
If you need a reliance-ready perimeter memo, see Token Legal Opinion.
You can — but partners, auditors and investors will ask how decisions are approved, how keys are controlled, and how transactions are evidenced. A written policy is the minimum; an operable control system is the goal.
Not always. Self-custody maximizes control but increases governance and operational burden. Third-party custody can improve audit/bank comfort, but adds counterparty and contract risk.
Pure proprietary holding typically differs from providing custody/exchange services to others. The perimeter depends on what you actually do (custody for third parties, brokerage, exchange, rails).
Authority matrix, wallet governance, transaction evidence, reconciliations and clear disclosure language on risks, limits and decision-making process.
Why BTC is held; permitted actions; limits; reporting expectations and stakeholders.
Self/third-party/hybrid; authority matrix; recovery and incident handling baseline.
Approvals, limits, key governance, transaction evidence, reconciliations and exceptions.
Templates, cadence, logs, and disclosure language aligned to actual operations.
DASP perimeter check (if applicable), partner DD support, reliance-ready memo framing.
We do not promise approvals. We structure governance and documentation so your treasury can be operated and defended.
- Companies holding BTC as treasury reserve.
- Boards needing approvals and reporting discipline.
- Hybrid custody setups (reserve vs operational).
- Partner/audit readiness for crypto balance sheet.
Focus: authority matrix + custody controls + evidence trail + perimeter clarity (no accidental service activity).