> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gomaestro.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Security, custody & compliance

> How assets are held, how screening works, and how contracts are audited.

export const Banner = ({src, alt = "", ratio = "16 / 7", position = "center", radius = "2px"}) => <img src={src} alt={alt} style={{
  display: "block",
  width: "100%",
  aspectRatio: ratio,
  objectFit: "cover",
  objectPosition: position,
  borderRadius: radius,
  margin: "0.25rem 0 1.75rem"
}} />;

<Banner src="/images/trust-hero.jpg" alt="A stone church standing firm on a green ridge below a vast mountain wall" />

Maestro is a technology platform. It takes **no custody by default** — the custody model depends on the vault — and it executes approved instructions only. Depending on the vault, deposited Bitcoin sits on-chain in the vault contracts or with a qualified custodian.

## Custody

Each vault states which custody options it supports: direct deposit into the vault contracts, or — on vaults that support it — deposit through a qualified custodian. **Anchorage Digital**, an OCC-chartered digital-asset trust bank, is the custodian currently integrated. [Custody options](/concepts/hybrid-custody) walks through both deposit flows — connect, swap, and deposit.

Each vault is **independent**: accounting, strategy execution, and collateral are scoped to the vault, so an issue in one strategy — a borrower default, a hedge dislocation — is contained to that vault rather than propagating across the platform.

<Warning>
  These are custody **options**, not a claim that the platform is "fully non-custodial." The direct-deposit path is self-directed on-chain; the custodian path grounds assets in qualified custody. Neither removes custody risk.
</Warning>

## Compliance & screening

Access to each vault is permissioned before any capital moves. Eligibility and KYC requirements are set by each vault, not by the platform. Every transaction is screened for sanctions and financial-crime risk before it settles.

* **Access is permissioned at the vault level.** Each vault sets its own eligibility and access rules, and you accept those terms before you deposit. Access is limited to qualified allocators, subject to the rules of the jurisdictions involved. KYC may be required, depending on the vault.
* **Screening runs platform-wide.** Every deposit and withdrawal is screened using TRM Labs for sanctions exposure and know-your-transaction (KYT) risk.

Eligibility, KYC, and any other requirements are defined in each vault's own terms — review them before you deposit. Maestro does not receive or store customer account information; that responsibility sits with the custodian on the custodian path, and with your own compliance function. A dedicated compliance function tracks regulatory developments across the jurisdictions Maestro operates in.

## Audits

Smart-contract audits from **Halborn** cover the vault and token contracts that move and account for Bitcoin on-chain. The contracts are open source: [maestro-vault-contracts](https://github.com/maestro-org/maestro-vault-contracts).

| Item                  | Provider | Scope                   |
| --------------------- | -------- | ----------------------- |
| Smart-contract audits | Halborn  | Vault & token contracts |

<Info>
  Full audit reports are available to qualified allocators under NDA. Contact your Maestro representative for access.
</Info>