Standard
Crypto-Asset Service Provider Vetting Standard
This standard sets the crypto-specific acceptance requirements for selecting and onboarding an external provider through which the organization trades, exchanges, transfers, safeguards, or obtains access to crypto-assets. It is a requirements overlay under the Crypto-Asset Governance Framework, implemented through the organization's existing supplier lifecycle (intake, tiering, due diligence, contracting, monitoring, and exit), and it is not a substitute for the authorization, procurement, legal, security, privacy, or financial-crime review that applicable law and internal policy require.
- Type
- Standard
- Version
- 0.0.2
- Date
- 2026-09-28
- Owner
- Crypto-Asset Governance Approver
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Crypto-Asset Governance
- Review frequency
- 6 to 12 months and upon material provider, ownership, authorization, service, custody-arrangement, threat, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Applicability
- 3. Requirements
- 4. Evidence requirements
- 5. Limitations
Related documents
- crypto/
README.md (opens in a new tab) source - Crypto-Asset Governance Frameworkcrypto
- Digital Asset Custody Standardcrypto
- Third-Party and Supply Chain Risk Standardrisk
- Supplier and Cloud Governance Frameworksupply-chain
- MiCA Implementation Annexcompliance
Next
All Documents