Key, Access and Custody Review
Custody or wallet-ops controls — reviewed without keys, balances or fund movement.
You need a proof-backed review of how custody or wallet-operations controls are documented, using sanitised observations only.
Do not send passwords, private keys, API keys, recovery codes, session tokens or other secrets.
Who it is for
Teams that need a proof-backed review of custody or wallet-operations controls for a customer, auditor or internal owner — without WitnessOps touching funds or secrets.
What you receive
- sanitised posture for the admitted control surface
- completeness notes on what was supplied
- findings: supported claims vs gaps or unresolved items
- named exclusions and handling limits
- signed proof package where agreed
How it works
1. Fit check
Name the custody or wallet-ops question without sending keys, seeds, balances or recovery material.
2. Authority
Confirm documentation and observation scope, and what must never be shared.
3. Review and assembly
Map sanitised material to control questions; keep unsupported claims separate.
4. Delivery
Hand over a package another responsible person can inspect without receiving secrets.
What is claimed
This review produces a read-only picture of how key, access or custody controls are documented. WitnessOps does not take custody of funds or secrets.
How to inspect the result
Use the delivered posture notes, findings, and report to inspect what was reviewed and what remains outside scope.
Boundaries
- No keys, seed phrases, balances, fund movement, taking custody, or solvency claim.
- Not an exchange service or compliance certification.
- Only documentation and agreed non-secret observations are reviewed.
- WitnessOps does not request private keys, seed phrases or recovery codes.
Not included
- custody of funds
- fund movement
- exchange service
- private key handling
- compliance certification
Start a review
Primary route: /review/request
Fallback contact: engage@mail.witnessops.com
Do not send passwords, private keys, API keys, recovery codes, session tokens or other secrets.