Business Treasuries

A company holding Bitcoin on its balance sheet faces a problem that single-signer wallets can't solve: no one person should be able to move corporate funds alone, and no single lost laptop should be able to lose them. A treasury needs a quorum — several people who must agree before a payment goes out — and it needs to survive turnover, travel, and the occasional misplaced device.

SigVault models this as an organization with a multi-signature vault, where the signing keys can come from people inside the company and from trusted outsiders like an external accountant.

The shape of a treasury vault

A typical setup is a 2-of-3 or 3-of-5 policy:

• One key held by a founder or CEO
• One key held by the finance lead
• One key held by an external accountant at a separate firm

No single key can spend. Two of the three (or three of five) must sign each transaction. Because the accountant's key lives in their own SigVault organization, you get an independent co-signer without adding them to your workspace, your payroll, or your audit trail.

How it works in SigVault

1. Create the organization for your company and invite the founder and finance lead as members, each with a defined role.
2. Connect hardware wallets. Every signer plugs in their own device — Ledger, Jade, BitBox02, Trezor, or Coldcard — and SigVault reads the public key. Private keys never leave the device.
3. Share a device into the vault builder. Each member opts in to expose only the public key of the device they'll sign with. The external accountant does the same from their own organization.
4. Build the vault. Choose the quorum — say 2-of-3 — and SigVault assembles a descriptor-based multisig using BIP-388 output descriptors, so the wallet is portable across other Bitcoin tools.
5. Each signer approves the vault. Joining a specific vault is an explicit, per-vault consent — never automatic.

wsh(sortedmulti(
  2,
  [ceo-fingerprint/48'/0'/0'/2']xpub6...,   // founder
  [cfo-fingerprint/48'/0'/0'/2']xpub6...,   // finance
  [acct-fingerprint/48'/0'/0'/2']xpub6...   // external accountant
))

Paying out

When the company needs to send Bitcoin, SigVault drafts the transaction and routes it to the signers. Each one reviews the amount and destination on their own hardware wallet screen and signs. Once the threshold is met, the transaction broadcasts. If you prefer, signing can be fully air-gapped.

Surviving lost keys and departures

Add a time-locked recovery path so a lost or compromised device never means lost funds. If a signer leaves the company or a device is destroyed, the remaining quorum can still transact, and a configurable recovery branch (for example, a fallback key that activates after 180 days of inactivity) protects against being locked out entirely.

SigVault never holds a key, never signs on your behalf, and never auto-includes a device in a vault. The organization is a coordination layer, not a custodian.

Why finance teams trust it

• Non-custodial. The company's keys stay on the company's hardware.
• Independent co-signers. The accountant participates without merging organizations or sharing your books.
• Audit-ready. Every transaction is logged and traceable inside your own org's trail — clean reporting for the desk and for auditors.