Picture the worst morning a trading platform can hand you. The app will not load, withdrawals are paused, and a banner says the team is "reviewing the situation." Whether your money is safe depends on a design choice the company made years ago.
That choice is custody. A custodial platform holds your assets for you. A non-custodial platform never touches them, and you keep control through your own wallet, exchange, or broker account.
AI trading platforms add a second question: what can the software do with that access? This guide compares both models and shows what changes for your funds and your risk. It ends with questions to ask before you connect anything.
The short answer: who holds the keys?
The difference comes down to one question: who controls the private keys or credentials that can move your assets? On a custodial platform, the company does, and on a non-custodial one, you do.
The rest follows from that. Insolvency exposure, insurance, recovery options, and your own security workload all shift with the answer. The table below summarizes the trade-offs.
Factor | Custodial platform | Non-custodial platform |
|---|---|---|
Who holds your assets | The platform or its partner custodian | You, in your own wallet, exchange, or broker account |
Who can move funds | The platform, under its own controls | You; the platform acts only within permissions you grant |
Main failure risk | Hack, insolvency, freeze, or misuse by the operator | Phished keys, over-broad permissions, or venue failure |
If the company shuts down | Access depends on its solvency and process | Funds stay where they were; you reach them directly |
Insurance | Possible, such as SIPC for covered securities at member brokers | Rarely from the platform; check each venue |
Lost login or key | Support can often restore access | Lost keys can mean permanent loss |
Your workload | Lower; the operator handles security | Higher; you manage keys, permissions, and approvals |
What does "custodial" mean on an AI trading platform?
A custodial platform takes possession of your assets or the keys that control them. Brokerages, exchanges, and some AI trading apps work this way. You deposit funds, and the operator records your balance in its own books.
The SEC's custody bulletin puts the risk plainly. It warns: "If the third-party custodian is hacked, shuts down, or goes bankrupt, you may lose access to your crypto assets." It also flags practices such as rehypothecation and commingling customer assets.
That risk is not theoretical. In December 2022, the SEC charged FTX's founder with concealing the diversion of customer funds to his trading firm. The SEC said that firm enjoyed a virtually unlimited line of credit funded by the platform's customers.
Regulated custody can offer real protections, though. SIPC covers up to $500,000, including $250,000 for cash, if a member brokerage fails. It does not cover market losses, and it excludes crypto assets that do not qualify as securities.
Some AI trading platforms run inside a brokerage. Composer by SoFi is one example: it operates as a regulated brokerage, so assets sit in accounts it controls. In that design, the AI and the custody live under one roof.
What does "non-custodial" mean?
A non-custodial platform never takes possession of your assets. Your funds stay in your own wallet, exchange account, or brokerage account. The platform connects through API keys or wallet signatures and acts within the permissions you grant.
One nuance matters. Non-custodial describes the AI layer, not the whole chain. Your assets still live somewhere, so trust shifts to whoever holds them.
That holder could be your own wallet, an exchange, a broker, or an onchain venue. Each carries its own risks, which a platform's custody label does not erase.
A quick example: the same trade under both models
Say an AI brief flags a setup, and you decide to act. The steps differ more than the screen suggests.
On a custodial platform, you first deposit funds. The platform holds them and executes inside its own system. Your balance is a record in its books until you withdraw.
On a non-custodial platform, your funds never leave your account. The AI platform prepares the order, and you approve it. The trade settles at the venue that already holds your assets.
Both paths reach the same market. The difference is who can interfere between your decision and your money. That is the whole debate in miniature.
What changes for your funds?
Switching models changes concrete things about your money. These are the differences that matter most:
Access and control. A custodial operator can pause, restrict, or freeze your balance. A non-custodial platform has no such lever over assets it does not hold.
Withdrawals. Custodial withdrawals run through the operator's processes and solvency. Non-custodial funds can be moved at the venue that holds them, without asking the AI platform.
Insolvency exposure. If a custodian fails, customers may face delays or losses while the bankruptcy plays out. A non-custodial platform's failure does not touch assets it never held.
Insurance and recourse. Custodial brokerages may offer SIPC coverage for covered securities. Non-custodial setups rarely include platform-level insurance, so check each venue.
Recovery. A custodian can often reset a lost password. Lose the keys to a self-held wallet, and the SEC notes you may permanently lose access.
Reuse of your assets. Custodians may commingle assets or use them as collateral, depending on their terms. A non-custodial platform cannot reuse what it never holds.
What changes for your risk?
Funds and risk are not the same thing. Custody changes who can lose your money. It does not change how markets, leverage, or AI mistakes behave.
Counterparty risk moves
Custodial platforms concentrate counterparty risk in one company. A single failure can hit every customer at once. Non-custodial platforms spread that risk across venues you pick yourself.
Security risk shifts toward your habits
Self-custody does not make theft impossible. Chainalysis's 2025 theft data counted 158,000 personal wallet compromises, affecting at least 80,000 victims. Those incidents took about $713 million, or 20% of all value stolen that year.
Total theft topped $3.4 billion in 2025. One service compromise in February accounted for $1.5 billion of it. The lesson cuts both ways: a pooled custodian is a big target, and self-custody makes you the target.
Permission risk is easy to miss
Non-custodial does not mean permissionless. An API key with trading rights can still place bad orders. One with withdrawal rights can empty an account if someone steals it.
Operational risk hits both models
Outages happen everywhere. A custodial outage can freeze your balance, while a non-custodial one may only pause the AI features. Check how each platform handles downtime, and where your funds stay reachable.
Market and AI risk stay exactly the same
No custody model fixes a bad trade. AI analysis can be wrong, leverage can liquidate a position, and fast markets can slip past your stop. Treat custody as one layer of risk control, not all of it.
Where does AI autonomy change the equation?
Custody and control are different things. A platform can be fully non-custodial and still place orders for you. What matters is how much authority you delegate.
Think of a spectrum. At one end, the AI explains and you decide. At the other, an agent trades unattended around the clock with your permissions.
The table below maps four common levels of delegation to the access each one needs.
Delegation level | What the AI can do | Access it needs | Main extra risk |
|---|---|---|---|
Explain only | Analyze markets and answer questions | None; no account connection required | Acting on a wrong analysis |
Plan and monitor | Draft trade plans and watch positions | Read-only access is usually enough | Trusting stale or incomplete data |
Orders with approval | Prepare orders you confirm one by one | Trade permission, ideally no withdrawal | Approving too fast |
Orders unattended | Trade on its own, around the clock | Trade permission; limits matter most | Errors compounding while you sleep |
Every level can be non-custodial. The unattended end simply carries more risk. So ask two questions: who holds the funds, and who presses the button?
How do API keys and wallet permissions limit the damage?
On a non-custodial platform, permissions are your main safety dial. Exchanges typically let you create keys with separate rights: read-only, trade, or withdraw. A key that cannot withdraw cannot drain your account, even if it leaks.
