https://t.co/HteEnF2ra6
Bitpanda Custody
Former Trustology custody unit, now Bitpanda's HSM-based institutional custody platform
What is Bitpanda Custody?
Company and ownership
Bitpanda Custody began as Trustology, a London company incorporated in October 2018 and run by founder Alex Batlin, a former blockchain lead at BNY Mellon and founding head of the UBS FinTech Innovation Lab. The FCA registered Trustology as a cryptoasset business under the Money Laundering Regulations on October 4, 2021. Bitpanda announced the acquisition in February 2022, and the company was renamed Bitpanda Custody Ltd on March 29, 2022.
Bitpanda was founded in Vienna in 2014 by Eric Demuth, Paul Klanschek and Christian Trummer, and its holding company is Bitpanda Group AG in Zürich. Batlin left the custody company's board on December 31, 2025; Markus Dorner and Sebastian Aigner are now its directors. Since March 4, 2026, custody has been one of six product lines in Bitpanda Enterprise, and custody.bitpanda.com redirects to the Enterprise site. Group CEO Lukas Enzersdorfer-Konrad plans to leave for Erste Group in the first quarter of 2027, and co-founder Christian Trummer became co-CEO in September 2026.
Custody model and security
Wallet seeds and custody keys are generated and used only inside FIPS 140-2 Level 3 hardware security modules, and keys never leave the HSM boundary. A Trust Co-Signing Service checks each transaction against preset rules before signing, and destination addresses must be pre-approved in an address book. Clients choose among four deployment models: multi-tenant SaaS, a dedicated single-tenant environment, online on-premises, or an offline air-gapped setup for deep cold storage. In the two non-custodial on-premises models, the client hosts the physical or private-cloud HSM environment.
Bitpanda lists an ISO 27001-certified security management system and a SOC 2 Type II audit for the custody platform. The service targets 99.75% uptime, with infrastructure monitored around the clock.
Regulation and enforcement
The Bitpanda entity that provides custody depends on the client's jurisdiction. In Dubai, Bitpanda Custody MENA FZCO holds VARA license VL/25/04/006 for custody services including custodial staking, issued April 25, 2025, and its permitted clients include retail investors. ESMA's interim MiCA register lists Bitpanda GmbH, authorized by Austria's FMA on April 9, 2025, and Bitpanda Asset Management GmbH, authorized by Germany's BaFin, with custody and administration of crypto-assets among their services. Malta's MFSA authorized BP23 CA Limited, which trades as Bitpanda, for custody as well. In the UK, Bitpanda Custody Ltd was registered with the FCA in 2021 as Trustology, and Bitpanda's enterprise site describes the business as FCA registered.
In August 2026, the FMA fined Bitpanda GmbH €70,000 under MiCAR because a crypto-asset white paper was submitted late and marketing ran before the paper was published. The decision is final and does not concern custody.
Products and integrations
Native support covers Bitcoin, Ethereum, Solana, BNB Smart Chain and EVM layer 2 networks, and XDC is also supported. New chains go through a compliance-reviewed onboarding process. Institutions can stake through governed delegation to approved validators without sharing custody keys. An API and SDKs cover address creation, transactions, approvals and reporting, with webhooks for notifications, and Travel Rule automation and KYT screening run by default. A Token Management System handles token issuance.
Within Bitpanda Enterprise, custody sits beside investment-as-a-service, liquidity, payments, stablecoin and tokenization products. Partners named at the March 2026 launch included Société Générale, Deutsche Börse Group, selected Raiffeisen banks, RAKBANK and Onda Finance, with end users in the EU, UK, UAE and Latin America.
Founders
Pros and cons
Pros
- VARA custody license in Dubai plus MiCA custody authorizations in Austria, Germany and Malta
- Keys generated and used only in FIPS 140-2 Level 3 HSMs, with an air-gapped option
- Same stack available as custodial SaaS or as a non-custodial on-premises install
- SOC 2 Type II audit and ISO 27001-certified security management
Cons
- Named network support is limited to Bitcoin, Ethereum, Solana, BNB Smart Chain, XDC and EVM layer 2s
- HSM-only key model with no MPC signing
- The contracting entity and license vary with the client's jurisdiction
- Leadership turnover: the founder left the board in 2025 and the group CEO departs in 2027
Our review
Bitpanda Custody pairs HSM-based key storage with licensed custody entities in Dubai and the EU and an on-premises option. Its named network list is short, and the brand and leadership have changed more than once since 2022.
Licensing is the main strength of Bitpanda Custody. A VARA custody license in Dubai and MiCA authorizations covering custody in Austria, Germany and Malta give institutions in the EU and the Gulf a regulated Bitpanda entity to contract with. The UK company also carries the FCA registration it obtained as Trustology. The same HSM software can run on a client's own premises, including an air-gapped version, which suits banks that must keep keys in-house.
The security design is conventional and audited. Keys stay inside FIPS 140-2 Level 3 HSMs, and an automated co-signer applies policy before any signature. The platform holds a SOC 2 Type II attestation alongside ISO 27001 certification. Staking works without handing keys to validators, and the Dubai license explicitly covers custodial staking.
Breadth is weaker. Bitpanda names Bitcoin, Ethereum, Solana, BNB Smart Chain, XDC and EVM layer 2 networks as supported, and exact availability depends on the deployment. Keys live only in HSMs, so teams that require MPC key sharding will need another vendor. The legal counterparty also changes with the client's jurisdiction, so a multinational group may sign with more than one Bitpanda entity.
Continuity is the other open point. The custody brand has changed twice since early 2022, most recently to Bitpanda Enterprise Custody, and founder Alex Batlin left the board at the end of 2025. At group level, CEO Lukas Enzersdorfer-Konrad leaves in early 2027 and the Frankfurt IPO is on hold. The parent reported €371 million in adjusted 2025 revenue, while adjusted EBITDA fell 75% to €13 million.
On enforcement, Austria's FMA fined Bitpanda GmbH €70,000 in August 2026 because a white paper was submitted late and marketing ran before it was published, both breaches of MiCAR. The notice did not allege customer losses and did not concern custody.
Bitpanda Custody fits banks and brokers in Europe and the Gulf that want a licensed custodian or an HSM stack they can run themselves. It also suits fintechs that already use Bitpanda's investment infrastructure.
Sources (24)
- custody.bitpanda.com (301 redirect)
- Bitpanda Enterprise custody solutions
- Bitpanda Enterprise Custody product page
- Bitpanda security page
- VARA public register: Bitpanda Custody MENA FZCO
- Bitpanda UAE custody legal notice
- Bitpanda UAE custody page
- FMA: Granting of authorisation Bitpanda GmbH
- ESMA interim MiCA register (CASPs)
- FCA statement on Bitpanda's acquisition of Trustology
- Companies House: Bitpanda Custody Ltd
- Companies House: Bitpanda Custody Ltd officers
- Bitpanda Group about page
- Introducing Bitpanda Enterprise
- FX News Group: Bitpanda Enterprise launches
- Global Custodian: Bitpanda acquires Trustology
- Finance Magnates: Bitpanda CEO to depart, IPO delayed
- Finance Magnates: Bitpanda fined EUR 70,000
- Cointelegraph: Bitpanda third MiCA license
- Cointelegraph: Bitpanda institutional cold storage
- The Block: Two Sigma and ConsenSys back Trustology
- Bitpanda summary of custody policy (schema.org metadata)
- Bitpanda (llms.txt)
- Vision Chain
Specs
| Custody model | Qualified custodian, HSM, Self-custody software · unverified |
|---|---|
| Regulated | Yes · unverified |
| SOC 2 report | Yes · unverified |
| Staking | Yes · unverified |
| API access | Yes · unverified |
| Licenses & charters | VARA VASP license for custody services (UAE), FMA MiCA CASP authorization (Austria), BaFin MiCA CASP authorization (Germany), MFSA MiCA CASP authorization (Malta), FCA cryptoasset registration (UK) · unverified |
| Cold storage | Yes · unverified |
Not disclosed by the provider: KYC required, Clients, Insurance, Assets supported, MPC, Qualified custodian.
Data from the provider's website and public sources, checked Oct 28, 2026. Fees and availability change; confirm on the official site before you sign up.
Key features
HSM key storage
Wallet seeds and custody keys are generated and used only inside FIPS 140-2 Level 3 HSMs and never leave the HSM boundary.
Trust Co-Signing Service
An automated co-signer checks every transaction against predefined rules before it is signed.
Address book controls
Destination addresses, including those used for on-chain applications, must be pre-approved in an address book.
Air-gapped cold storage
An offline on-premises deployment provides air-gapped environments built for deep cold storage.
Institutional staking
Governed delegation workflows earn network rewards through approved validators without sharing custody keys.
APIs and webhooks
An API and SDKs cover address creation, transactions, approvals and reporting, with webhooks for notifications.
Built-in compliance checks
Travel Rule automation and KYT screening run on the platform by default.
Inside Bitpanda Custody
Custodial SaaS
Multi-tenant or dedicated single-tenant environments in which a licensed Bitpanda entity provides the custody service.
Non-custodial on-premises
Online or air-gapped installs in which the client hosts the physical or private-cloud HSM environment.
Institutional staking
Delegation to approved validators with reward collection, covered in Dubai by the VARA custodial staking permission.
Token Management System
Token issuance and management tools, including branded stablecoins, connected to the custody platform.
User reviews
No user reviews yet. Have you used Bitpanda Custody? Share your experience below.
FAQ
Is Bitpanda Custody regulated, and where?
Yes. Bitpanda Custody MENA FZCO holds VARA license VL/25/04/006 for custody in Dubai, and Bitpanda entities in Austria, Germany and Malta hold MiCA authorizations that include custody. In the UK, Bitpanda Custody Ltd was registered with the FCA under the Money Laundering Regulations in October 2021.
Who owns Bitpanda Custody?
Bitpanda, the crypto broker founded in Vienna in 2014, acquired Trustology in 2022 and renamed it Bitpanda Custody Ltd on March 29, 2022. The group's holding company is Bitpanda Group AG in Zürich.
What was Trustology?
Trustology was a London custody company incorporated in October 2018 and founded by Alex Batlin, previously blockchain lead at BNY Mellon. The FCA registered it as a cryptoasset business on October 4, 2021, a few months before Bitpanda bought it.
Does Bitpanda Custody support staking?
Yes. Institutions can delegate to approved validators and collect rewards without sharing custody keys, and the VARA license in Dubai covers custodial staking.
How does Bitpanda Custody protect private keys?
Seeds and keys are generated and used only inside FIPS 140-2 Level 3 HSMs, and a Trust Co-Signing Service checks transactions against preset rules. An air-gapped deployment is available for deep cold storage.
Has Bitpanda been fined?
In August 2026 Austria's FMA fined Bitpanda GmbH €70,000 under MiCAR over a late white paper submission and marketing released before publication. The case did not concern custody.
Latest from Bitpanda Custody on X
https://t.co/HteEnF2ra6
Im Q2 verzeichnete Palantir z.B. ein Revenue von 93 %. Heute Abend zeigen uns ihre Q3-Earnings, ob der KI-Trend bestehen bleibt.
Eure Meinung dazu? 💬⤵️
"Niemand von uns kann es sich leisten, dies als das Problem eines anderen zu betrachten."
#CybersecurityAwarenessMonth
Recent public posts from @bitpanda, shown as published. Not reviewed or endorsed by CryptoReview.
Alternatives to Bitpanda Custody
NYSE-listed crypto custodian with an OCC-chartered trust bank and up to $250M insurance
MPC custody software and NYDFS-chartered qualified custody for institutions
Crypto custody through Anchorage Digital Bank, an OCC-chartered national trust bank
Coinbase's institutional prime broker, with custody at its NYDFS-chartered trust company
FINMA-licensed Swiss crypto bank offering custody for 32 assets plus trading and staking
Deutsche Börse's crypto custodian, supervised by FINMA and BaFin with a MiCA license