An asset owner appoints a global custodian. The global custodian appoints sub-custodians in each market where assets are held. In some markets the sub-custodian in turn relies on a central securities depository or a further local agent. The asset owner’s legal relationship runs only to the first link in that chain, but its exposure runs the whole length of it. What governs the difference is a set of provisions in the global custody agreement that are negotiated once and then rarely revisited.
Those provisions decide practical questions. Whether the client is told before a sub-custodian changes or after. Whether the global custodian is liable for a sub-custodian’s failure on a strict basis, on a failure-to-exercise-care basis, or only where it failed to select and monitor reasonably. What reporting the client can demand about the network. What happens when a market becomes unsafe and assets need to come out.
For operational due diligence teams and for the custodians themselves, the difficulty is that these duties are standing rather than dated. Nothing prompts a review. The agreement sits in a repository, the network changes, market conditions change, and the terms are consulted for the first time in years at exactly the moment when speed matters.
The five provisions that carry the exposure
Custody agreements are long, and most of their length is operational detail. The provisions that determine outcomes in a stress event are a much smaller set, and they are worth extracting into a comparable form across every custodian relationship.
- Sub-custodian appointment and change notice, specifying whether notice is prior or subsequent, its length, and whether the client has any right to object.
- Liability standard for sub-custodian acts, which ranges from near-strict responsibility to a duty limited to reasonable care in selection and monitoring.
- Due diligence and periodic review, obliging the custodian to assess sub-custodian financial condition, operational capability and local market risk on a defined cycle.
- Reporting and information rights, covering network composition, review outcomes, material findings and notification of adverse events at a sub-custodian.
- Market withdrawal and exit mechanics, governing what happens when a market becomes unsafe, including who decides, who bears cost and how quickly assets can be moved.
Holding these five in a single comparable view across custodians is unusual and immediately useful. Most institutions discover meaningful variation, particularly in the liability standard, where terms negotiated at different times by different teams have produced a network of relationships with materially different risk profiles for no deliberate reason. The comparison also makes renewal negotiations more productive, because a term that is an outlier across the network is easier to argue about than one considered in isolation.
A dated obligation announces itself. A standing duty such as periodic sub-custodian review only surfaces if someone tracks it as a recurring obligation with an owner and an evidence requirement. Otherwise its first appearance is in a due diligence questionnaire from a client.
What the tracked version contains
Turning custody terms into monitorable obligations means recording not just what the agreement says but what it requires someone to do, when, and with what evidence.
- Network inventory linked to the agreement. Which sub-custodians serve which markets under which custody agreement, so a change notice can be checked against the governing terms rather than against memory.
- Notice obligations with a response path. A prior notice period is only valuable if the recipient is identified and has a defined window to assess and object.
- Review cycle and evidence. The contractual review frequency, the last review date and the report that satisfied it, so the duty can be evidenced without reconstructing it.
- Comparable liability position. The liability standard expressed in a consistent form across custodians, so operational due diligence can compare relationships rather than re-read agreements.
- Exit readiness. The contractual notice, cost allocation and timetable for withdrawing from a market, held where it can be read quickly rather than located under pressure.
Five steps to tracked custody network oversight
Step 1, extract the five provisions from every custody agreement
Produce one comparable record per custodian relationship. The comparison itself frequently justifies the exercise, because variation in liability standards across relationships is usually larger and less deliberate than expected.
Step 2, map the network against the agreements
Link each market and sub-custodian to the agreement that governs it. Where a custodian’s network disclosure and the client’s own record disagree, that discrepancy is a finding worth resolving before it appears in a regulatory review. Where a market is served through a further local agent beyond the sub-custodian, record that too, since the chain frequently runs one link longer than the network disclosure suggests.
Step 3, convert standing duties into recurring obligations
Periodic review, reporting and attestation duties become scheduled obligations with owners and evidence requirements, using the same approach set out in the bank vendor contract controls model.
Step 4, exercise the information rights
Request the network reporting the agreement entitles you to, at least annually. Rights that are never exercised tend to be narrowed at renewal on the reasonable argument that nobody uses them, and the exercise itself tests whether the custodian can actually deliver.
Step 5, rehearse a market exit on paper
Take one market and walk through the contractual exit path, including notice, instruction authority, cost allocation and realistic timetable. The gaps found in a desk exercise are cheap. The same gaps found during a market closure are not.
See custody network duties tracked as obligations
Aavenir extracts notice, liability, review and exit terms from custody agreements and keeps each duty owned, scheduled and evidenced.
Why this is becoming a client question
Operational due diligence teams acting for asset owners have broadened their questioning from the custodian to the network behind it, and the questions are increasingly contractual rather than operational. What is the liability standard. How often is each sub-custodian reviewed and against what criteria. What notice would we receive before a change. What is the documented exit path from a given market. A custodian that can answer these from a maintained record, with the governing clause and the last review attached, completes a due diligence cycle in a fraction of the time and with considerably less relationship friction. The underlying capability is the same one that supports examination readiness more generally: contract terms held as data, with evidence attached. What makes this different from a standard questionnaire exercise is that the answers have to be consistent over time. A due diligence team that receives a different characterization of the liability standard from one year to the next will escalate, reasonably, and resolving that escalation costs far more than maintaining the record would have.
Custody oversight duties and tracking approach
A working view for building the register. The distinction between event-driven and recurring duties determines the mechanism, and standing terms with no clock still need a home so they can be found quickly.
| Duty | Type | Common weakness | Tracking approach |
|---|---|---|---|
| Sub-custodian appointment notice | Event-driven | Notice received by nobody in particular | Named recipient with response window |
| Periodic sub-custodian review | Recurring | Performed but not evidenced | Scheduled obligation with report attached |
| Network reporting right | On demand | Never exercised, narrowed at renewal | Annual scheduled exercise |
| Adverse event notification | Event-driven | Threshold undefined | Clause position recorded for comparison |
| Market withdrawal mechanics | Standing | Located only under pressure | Extracted summary held with the record |
Custody network oversight is a contract problem wearing operational clothing. The duties are real, the exposure runs further than the legal relationship, and the terms that govern both are usually read twice: once at negotiation and once in a crisis. Extracting the five provisions that matter, holding them comparably across custodians, and converting the standing duties into owned obligations closes most of that gap for modest effort. It also means the next operational due diligence questionnaire is answered from a record rather than from a reading exercise. The underlying effort is a one-time extraction followed by low-cost maintenance, which is a favorable ratio for an area where the alternative is reading a hundred-page agreement under time pressure.
For related guidance, see OCC and FFIEC vendor oversight, the contract controls, Reg S-P service provider oversight: a contract guide and Market data license agreements: a control datasheet.
