Skip to main content
Dormy.

Dormy approach · Custody standards

Beyond retail

Real custody begins with allocated ownership, then builds the controls, insurance and legal structure around the person and the holding—not around a standard retail package.

Last updated:

What separates serious physical-metal custody from a retail storage offer is not the vault door alone. It is identified client ownership, documented provenance, records that can be reconciled, insurance terms that can be read, and legal agreements whose limits are understood before the metal moves.

Key takeaways

  • Allocated ownership is Dormy’s one universal custody standard: client-owned metal is identified on custody records, with serial numbers where the product carries them.
  • An audit report, an insurance policy and a custody agreement answer different questions; none substitutes for the others.
  • LBMA Good Delivery is a refiner and bar standard, not a certification of a dealer, custodian, vault or insurance arrangement.
  • Controls reports, insurance terms and legal separation are evaluated and configured per client and per provider rather than promised as one uniform package.
  • Calling metal allocated does not by itself guarantee an insolvency outcome; the records, contracts, segregation and actual control still matter.
  • A gold ETF can provide market exposure, but its shares are securities and are not the same thing as direct ownership of identified metal.

What does “beyond retail” actually mean in how metal is held?

Beyond retail means separating the sale of metal from the structure that proves who owns it, where it came from, who controls it and what happens if a service provider fails. Dormy’s fixed line is allocated ownership. The surrounding safeguards are selected from real documents for the client and provider involved.

A retail transaction often ends when payment clears and a receipt is issued. If storage is included, the buyer may receive an account balance and a broad assurance that the metal is secure. That can be adequate for a straightforward purchase, but it leaves a serious owner with unanswered questions. Is the balance tied to identified property? Is the dealer also the custodian? Can the metal be used, pledged or substituted? Which entity owes the obligation? What evidence exists outside that entity’s own ledger?

Dormy starts at the other end. Before discussing a polished vault description, we establish what the client is meant to own. For every applicable holding, that answer is allocated physical metal: property identified to the client on custody records, with serial numbers where the product carries them. Allocation is not an optional upgrade, and it is not exchanged for a lower fee or a more convenient pooled balance.

That does not mean every client receives one rigid package. A family trust holding large serialized bars, an individual holding sovereign coins and a retirement account operating through an independent custodian can require different records, controls, access procedures and contractual language. The serious work begins after allocation: reading what the controls report actually covers, understanding who is insured, examining title and lien provisions, and matching those terms to the size and purpose of the holding.

This is the distinction behind “bespoke.” It does not mean ornate products or an expensive label. It means refusing to pretend that a controls report, an insurance certificate and a custody agreement are interchangeable. Each addresses a different failure mode. The right combination is configured, documented and revisited rather than inherited from a dealer’s default checkout path.

Why is allocated ownership the one line Dormy will not cross?

Allocated ownership means the custody record identifies client-owned metal rather than merely promising an equivalent quantity from a common pool. Where a bar or product carries a serial number, that identifier belongs in the record. This is Dormy’s universal requirement because every other custody safeguard rests on knowing what property the client owns.

Allocation is the base layer, not a marketing adjective. The record should connect the owner to the metal. For a serialized bar, that can include refiner, weight, fineness and serial number. For coins or smaller products without individual serial numbers, the record can identify product, quantity, mint or refiner, denomination, weight and account. The form changes with the product; the principle does not.

Unallocated metal is different. The customer has a contractual claim for a quantity or value, while the provider controls a pool used to satisfy those claims. That structure can be efficient in wholesale settlement, but it introduces direct counterparty exposure. A statement showing “100 ounces” does not, by itself, establish that a particular 100 ounces is customer property.

Segregation is related but not identical. It describes how property is physically separated or handled. A holding can be allocated in a shared physical area if the records identify the client’s property and the custody terms preserve that ownership. Conversely, a sealed box sitting on a dedicated shelf does not cure a contract that gives the provider rights to use or encumber its contents. Serious analysis reads the records and agreement together.

Allocation also makes the next questions answerable. An inventory can be reconciled against the custody ledger. Insurance can be evaluated against declared values and locations. Withdrawal instructions can identify the metal to be released. Legal counsel can review whether the documents support bailment, custody, trust or another intended relationship. Without identified ownership, those protections can become claims about a pool rather than protections attached to the client’s property.

Why does the refiner matter, and what does LBMA Good Delivery establish?

LBMA Good Delivery is a standard for accredited refiners and qualifying bars, not an endorsement of the dealer or vault. It matters because institutional market participants use consistent requirements for bar dimensions, weight, fineness, marks, production capability, responsible sourcing and continuing refiner oversight when deciding what can move through the wholesale chain.

The London Bullion Market Association maintains the Good Delivery Lists and publishes the rules governing admission and continuing compliance. Its own Good Delivery Rules make an important distinction: a listing represents a refiner at a specific location. It does not certify the dealer that sold the bar, the custodian holding it, or the client’s insurance and legal structure.

That precision matters because “LBMA-approved storage” is often used as if one label validates an entire custody chain. It does not. Good Delivery provenance can establish that a wholesale bar came from an accredited production source and meets the relevant bar standard. Custody still requires its own evidence: intake records, inspection or assay procedures, chain of possession, inventory reporting and controls around release.

Institutions and insurers care about provenance because a recognized bar is easier to identify, test, value, accept and transfer. The refiner’s mark, fineness, weight and serial number provide a common language across the chain. LBMA’s responsible-sourcing framework also requires refiners in its program to maintain due-diligence systems and independent assurance. Those controls reduce ambiguity at origin; they do not eliminate the need to verify what happened after the bar left the refiner. For the bar-level detail, see how to verify a gold bar is real.

Coins and smaller bars do not all travel through the wholesale Good Delivery system. That does not make them inferior or inappropriate. It means the documentation should fit the product: sovereign-mint or recognized-refiner provenance, tamper-evident packaging where relevant, purchase records and a custody description specific enough to identify what was received.

What gets configured beyond allocated ownership?

Controls reporting, audit cadence, insurance structure and bankruptcy-separation documentation are evaluated per client and provider. Dormy does not promise that every arrangement carries the same report, policy or legal form. We help the client understand what each document proves, what it leaves open and which protections fit the engagement.

A smaller holding of widely traded coins does not necessarily call for the same reporting package as a large bar position held through a trust. A retirement account adds an independent custodian and its own recordkeeping chain. A direct holding may put more weight on withdrawal rights and title language. The goal is not to accumulate the most impressive acronyms. It is to close the material gaps for that owner.

Controls reports are one input. The American Institute of Certified Public Accountants describes SOC 1 as reporting on controls at a service organization relevant to user entities’ internal control over financial reporting. A Type II examination addresses whether the described controls operated effectively over a period. That can be useful evidence about processes such as transaction recording, authorization and reconciliation.

It is not a universal seal of safety. The scope may not include the control a client cares about. SOC 1 is not an inventory certificate, a legal opinion, a solvency review or proof that a particular bar exists. SOC 2 addresses selected Trust Services Criteria such as security or availability, but it too must be read for scope, period, exceptions, subservice organizations and complementary controls expected from the user.

Insurance is another input, and the policy has to match the custody facts. The named insured, covered property, declared value, locations, transit provisions, limits, deductibles and exclusions matter more than a logo on a brochure. Legal documentation then deals with a different set of questions: title, liens, rights of use, commingling, subcontractors, governing law, termination and the process for returning property.

Dormy’s role is to put those documents in front of the client, identify the trade-offs that affect physical metal and coordinate with the client’s attorney, accountant, custodian or insurance adviser where their judgment is needed. The arrangement is configured, not improvised—and never represented as stronger than the documents support.

How do you verify that the metal actually exists?

Verification is a chain of evidence, not one certificate. Start with the purchase confirmation and intake record, reconcile them to the custody ledger, identify serialized products, understand the provider’s inventory-count procedures and exceptions, and confirm how the owner can inspect, transfer or withdraw the holding.

The first evidence is transactional. A written trade confirmation identifies product, quantity, price and settlement. Shipping or transfer records establish movement. The receiving report establishes what the custodian accepted. The account record should then identify the holding with the level of detail the product permits. Those records should agree.

The second layer is operational. Ask how often the provider reconciles its physical inventory to its custody ledger, who performs the count, whether counts are surprise or scheduled, how sealed units are treated, how discrepancies are recorded and corrected, and whether a client can receive an excerpt relevant to the client’s own property. A controls report can support this review only if reconciliation and custody controls are actually within its scope.

The third layer is practical control. What happens when the client asks for inspection, transfer or delivery? Who must authorize release? Are there dual-control procedures? Is the receiving party verified? What records close the chain? A custody system is not credible merely because deposits are easy. The exit procedure is where identified ownership becomes operational.

The right evidence varies. Serial-level reporting is strong for large bars that carry serial numbers. It is not a sensible promise for every sovereign coin or sealed unit that lacks one. In those cases, product-level quantities, sealed-container identifiers, intake controls and withdrawal records do more useful work than forcing a serial-number claim the product cannot support.

What can real insurance coverage look like, and how should it be evaluated?

Real coverage is the policy that applies to the actual property, insured party, location and event—not the phrase “fully insured.” Evaluate the subscribing insurer or syndicate, insured interest, limits, deductibles, exclusions, valuation basis, mysterious-disappearance language, employee dishonesty, transit and the claims process.

Lloyd’s of London is frequently invoked in precious-metals custody. Lloyd’s is a marketplace in which underwriting syndicates accept risks; it is not one insurer issuing one universal vault policy. Lloyd’s own explanation of its market structure is why “Lloyd’s-backed” should begin a document review rather than end one.

An “all risks” form is also not coverage without boundaries. The phrase generally means covered physical loss unless excluded, but the exclusions, conditions and sublimits remain decisive. A policy may distinguish property in a vault from property in transit. It may value a loss at market value, replacement cost or another stated measure. It may insure the custodian’s interest, the customers’ interests, or both under specified conditions.

For a client, the useful questions are concrete. Is customer metal within the definition of insured property? Is the full declared value inside the applicable aggregate limit? What deductible applies, and who bears it? Are theft, employee dishonesty, unexplained loss, catastrophe and transit addressed? Are subcontracted locations scheduled? Who can make a claim, and what evidence must be produced?

Those answers can differ by provider, location, program and client. Dormy therefore reviews each depository's coverage with you per engagement. We do not turn a market name into a blanket guarantee, and we do not state that every client receives identical limits or wording.

Why does legal structure matter as much as the vault door?

A strong door protects against physical intrusion; legal structure addresses competing claims. The custody agreement and actual operations should support identified customer property, restrict use and pledging, address liens and subcontractors, and provide a return mechanism. Even then, “bankruptcy remote” is a structural objective, not an automatic or guaranteed result.

United States bankruptcy law begins broadly. Section 541 of the Bankruptcy Code defines property of the estate, while excluding certain interests the debtor does not own. The hard question is factual: did the customer retain ownership of specific property, or did the arrangement create a claim against the debtor? The text of 11 U.S.C. § 541 is the starting point, not a marketing label.

Courts examine the agreement and conduct. Identification, segregation, the right to substitute, the right to use or pledge property, liens, inventory practices and control can all matter. A document calling metal “allocated” helps only when the records and operations support that description. Conversely, customer property is not transformed into dealer inventory merely because an independent provider performs custody services; the actual rights govern.

That is why Dormy does not promise “bankruptcy proof” storage. We help evaluate whether the structure is designed to separate client property and whether the documents carry that design through. For a material position, counsel should review the custody agreement, any bailment or trust language, lien provisions, creditor rights, governing law and the consequences of provider or subcontractor insolvency.

Bankruptcy separation is also not one form that every client signs. Retirement custody, trust ownership, individual ownership and entity ownership can involve different contracting parties and records. The objective remains consistent—clear ownership and limited provider rights—but the documentation must follow the real owner and provider chain.

How does this compare with retail storage and a gold ETF?

A retail storage-included offer may leave ownership, audit and insurance terms inside one dealer relationship. Dormy begins with allocated ownership and configures the supporting controls around the engagement. A gold ETF is different again: it is a security providing market exposure, not personal title to identified metal.

A local consignment or “we will store it for you” arrangement is not automatically improper. It is simply incomplete until the agreement answers who owns the metal, whether it remains dealer inventory, how it is identified, whether it can be encumbered, what evidence sits outside the dealer’s own ledger, and how it can be withdrawn. Familiarity with the shop is not a substitute for those answers.

Likewise, an unaudited offer is not disproved by the absence of a SOC report. The provider may have other credible evidence. The buyer should understand what exists, who produced it and what it covers. The problem is not one missing acronym; it is relying on a broad assurance that cannot be tested.

An ETF serves a different purpose. It can offer liquid, brokerage-based exposure to the price of gold. The investor owns shares under the fund’s governing documents. The fund or its custody chain holds pooled metal, and creation or redemption commonly operates through authorized participants rather than ordinary shareholders. That may be the right instrument for market exposure. It is not direct ownership of a bar identified to the investor.

Retail storage, Dormy-standard allocated custody and paper gold exposure compared
QuestionRetail or unaudited storageDormy-standard allocated custodyGold ETF or paper proxy
What the buyer ownsMay be a consignment interest, pooled balance or undocumented claim; the agreement controls.Allocated client-owned metal identified on custody records; serial numbers where the product carries them.A security representing exposure through the fund structure, not a bar titled to the shareholder.
IdentificationMay rely on a receipt or dealer ledger without serial-level reporting.Specific identification is the baseline; reporting format is matched to the products held.The fund or its custodian accounts for pooled metal; ordinary shareholders do not receive a personal bar list.
Independent controlsMay be unavailable or outside any independent reporting scope.Relevant SOC 1 Type II, SOC 2 Type II or equivalent reporting is evaluated per provider and engagement, not promised uniformly.Fund reporting, audits and custody disclosures follow the security’s governing documents.
InsuranceA general statement may not identify the insured, limits, exclusions or valuation basis.Policy structure, insured interest, limits, exclusions and transit terms are evaluated and arranged for the specific engagement.Shareholders rely on the fund’s disclosed custody and insurance arrangements rather than owning a personal policy on identified bars.
Legal separationConsignment, dealer inventory, liens and customer property may not be clearly distinguished.Title, no-use terms, liens, segregation and insolvency language are reviewed in the actual agreements for that client and provider.The shareholder owns the security; rights against fund assets are governed by the fund documents.
Withdrawal or deliveryDepends on the dealer’s contract, inventory and procedures.Inspection, transfer and withdrawal mechanics are documented for the chosen arrangement.Ordinary retail shareholders generally buy and sell shares; physical redemption is normally limited by the fund’s terms.

What questions should a serious buyer ask about any custody arrangement?

Ask questions that force documents into view: what exactly do I own, where is that ownership recorded, may anyone use or pledge it, what independent evidence covers the relevant controls, whose interest is insured, what happens in insolvency, and how do I inspect, transfer or withdraw the property?

  1. What do I legally own? Ask whether the agreement conveys title to identified metal or creates a contractual claim for a quantity or value.
  2. How is it identified? Request the fields shown on the custody record, including serial numbers where the product carries them.
  3. Can anyone use, lend, pledge or substitute it? Read the actual restrictions and any lien language rather than relying on “allocated.”
  4. What independent reporting exists? Ask for the report type, covered period, scope, exceptions and subservice organizations—not merely its acronym.
  5. What does the insurance actually cover? Identify the insured party, property, locations, limits, deductible, exclusions, valuation method, transit and claim rights.
  6. What happens if a provider fails? Have counsel review title, segregation, creditor, subcontractor and return-of-property provisions for a material holding.
  7. How is inventory reconciled? Understand who counts, how often, how exceptions are resolved and what client-specific evidence is available.
  8. How do I leave? Confirm inspection, transfer, sale and physical-withdrawal procedures before metal arrives, including who authorizes release.

The point is not to demand the same answer from every provider. It is to know which answer fits the client, which document supports it, and which risk remains. Geographic diversification can be a separate consideration, but jurisdiction-by-jurisdiction storage belongs in its own analysis and is not a substitute for sound ownership structure.

Where can you go deeper on the surrounding decisions?

This page is the custody-structure hub. The next layer depends on the decision in front of you: account and storage costs, the difference between IRA and outright ownership, or the way trusts and entities affect title and succession.

Dormy, Inc. does not provide legal, tax, or personalized investment advice. Please confirm your situation with a qualified professional before acting.

Custody, controls and insurance documents are provider- and engagement-specific. A document review by Dormy is educational and operational coordination, not a legal opinion or insurance-coverage determination.

Common questions

The distinctions buyers ask about most.

Allocated ownership. For every applicable holding, client-owned metal must be specifically identified on custody records, with serial numbers recorded where the product carries them. Audit scope, insurance structure and legal documentation are then evaluated and configured for the client and provider involved.

No. Allocation is about identified ownership on custody records. Physical segregation can be an additional handling method, but the two terms should not be treated as synonyms. The decisive question is whether the records identify the client’s metal rather than merely a quantity owed from a pool.

No. A SOC 1 report addresses controls relevant to user entities’ internal control over financial reporting, and Type II tests their operation over a period. Its value depends on scope. It is not, by itself, an inventory count, security certification, insurance review or legal-title opinion.

No. Lloyd’s is an insurance marketplace, not one policy. Coverage depends on the actual wording, subscribing underwriters, insured party, limits, deductibles, exclusions, valuation method, locations and transit provisions. Those documents must be reviewed for the particular arrangement.

No blanket guarantee is responsible. Allocation supports a customer-property position, but an insolvency result depends on the contract, identification, segregation, liens, rights of use, actual control and governing law. A qualified attorney should review those terms for a material holding.

No. An ETF share is a security whose value is designed to track an investment strategy involving gold. It can be efficient market exposure, but an ordinary shareholder does not own a specifically identified bar on the shareholder’s own custody record or have ordinary delivery rights to it.

Beyond retail

Speak with a Dormy specialist, no commitment

Bring the custody proposal or documents you are considering. We will separate the fixed ownership standard from the safeguards that should be configured around your holding.