Fund GovernanceOperational Due DiligenceDigital AssetsAllocatorsChecklist

The ODD Readiness Checklist for Digital Asset Funds

By the time an operational due diligence analyst sits down opposite a manager, the outcome is usually half-decided. The examiner has already read the file: the response to the initial document request, the policies it contained, the gaps it exposed. Digital asset managers tend to prepare for the meeting and neglect the file, which is the wrong way round. This article sets out how the institutional ODD examination actually works, the seven domains it tests, the evidence each domain demands, and the standing pack that lets a fund open the exam with the answers already on the table.

"Operational due diligence is not an interview, it is an audit with a conversation attached. The managers who pass are the ones whose file answers the question before the analyst asks it. That is not a matter of polish; it is a matter of whether the control existed, was written down, and left a record."David Lloyd, CEO of CV5 Capital

How the Examination Works: Three Rules

Every institutional ODD process, whatever the allocator, tends to follow three working rules. The first is documents first: the analyst forms a view from the file before any meeting takes place, so the response to the initial document request sets the trajectory of the entire process. A complete, well-organised response signals an operation that runs on records; a slow or partial one signals the opposite before a single question is asked.

The second is controls over explanations: what a manager can show outweighs what a manager can say. An articulate description of a counterparty limit framework counts for little without the exposure grid, the breach log and the board paper that evidence it, and the inability to produce a record is itself recorded. The third is verification always: administrators, auditors, custodians and directors are contacted directly, and their answers are compared with the manager's own materials. Any discrepancy between what a service provider says and what the deck or DDQ claims becomes a finding, which is why provider descriptions should be re-verified regularly, a discipline we return to below. For the questionnaire that typically frames this process, see our guide to the 2026 digital asset fund DDQ and the companion piece on what an institutional DDQ tells investors.

The examiner's product is an internal memo that classifies observations into three categories: findings, which are remediable weaknesses noted for follow-up; material findings, which generally block an allocation until fixed; and vetoes, which are structural defects no remediation plan cures. Everything in this article exists to keep observations out of the last two categories.

CV5 Insight: ODD rarely wins an allocation on its own. It reliably loses one, and it loses it silently: most managers who fail an operational review are never told that this is why the conversation stopped.

The Seven Domains and the Evidence Behind Them

Stripped to its core, the examination of a digital asset fund concentrates on seven domains. Each has a core question, and each core question has a body of evidence that answers it. The table below is the map; a manager who can produce the right-hand column on request is, for most allocators, most of the way to a pass.

DomainThe core questionPrimary evidence
1. Custody & keysWho holds the assets, who can move them, and was the arrangement a documented decision?Custodian selection memo; segregation and insolvency analysis; wallet policy; annual custody re-review.
2. Valuation & NAVIs the NAV independent of the manager and traceable end to end?Valuation policy; pricing source matrix; administrator reconciliations; audit workpapers.
3. CounterpartiesDo exposure limits exist, and do they actually bind behaviour?Exposure grid; breach and escalation records; board reporting.
4. GovernanceCan anyone overrule the founder?Board packs; minutes; conflicts register; independent director terms.
5. ComplianceDoes the AML programme operate, or merely exist on paper?Officer appointments; screening logs; sampled onboarding files; filing calendar.
6. ResilienceHas the incident and continuity plan been tested?Security policy; incident response runbook; BCP; dated test records.
7. Service providersDo provider confirmations match the manager's claims?Engagement letters; verification consents; annual re-verification note.

Several of these domains have their own detailed treatments in our library: custody due diligence for fund managers and qualified custodians for crypto funds on domain one, the crypto fund valuation policy on domain two, and wallet governance policy on the key-management controls that sit beneath both custody and resilience.

What "Ready" Looks Like: A Representative Extract

Internally, we run this framework as a 94-item checklist across the seven domains, each item formatted with an evidence reference and a named owner. The extract below is representative of the standard the full set applies: note that every item is binary, evidenced and dated. "We have a wallet policy" is not an item; "transaction policy configured and exported as evidence" is.

Representative checklist items across the seven domains

  • Custody: Custody selection memorandum exists and is board-approved; no single-person movement capability at any wallet tier, evidenced by a policy export; annual custody re-review minuted within the last twelve months.
  • Valuation: Pricing source matrix covers every asset type actually held; the hardest position in the book has passed an internal trace test from wallet to NAV to audit.
  • Counterparties: Full inventory includes stablecoin issuers and staking providers, not just exchanges; at least one historical escalation or documented review of limit adequacy is on file.
  • Governance: Independent directors are briefed to speak to custody and valuation unaided; the conflicts register is current.
  • Compliance: Screening and on-chain analytics operate with logs; the regulatory filing calendar (audit, FAR, DITC) is current.
  • Resilience: The threat model covers social engineering of signers; a tabletop exercise has been completed and minuted within twelve months.
  • Providers: Provider descriptions in the DDQ and deck have been re-verified within twelve months; verification consents are ready for allocator calls.

Managers building a fund from scratch will recognise this as the operational layer of the digital asset fund launch checklist. The difference is that ODD readiness assumes the launch items are done and asks whether they left a record.

The Standing ODD Pack

The practical answer to the "documents first" rule is a standing pack: one version-controlled folder containing the current industry-standard DDQ response, the governance set, the custody set, the valuation set, the counterparty grid, the compliance set, the resilience set, provider letters and consents, the latest audited financials and prior ODD correspondence. It should have one named owner, typically the COO or the platform where the fund operates on one. It should also have a diarised quarterly refresh and a change log. Structure the data room to mirror the seven domains, so that allocator requests map one-to-one onto folders rather than triggering a scramble.

The Mock Exam: Running It on Yourself

The cheapest ODD failure is the one found privately. Once a year, and before each raise, run the examination cold using someone outside the team: an independent director, the platform, or an external consultant. Issue the document request unannounced and score the response for time and completeness. Conduct the interview with the founder excluded for at least half the session, because allocators will do the same, and a team that cannot answer custody or valuation questions without the founder in the room is itself a finding. Run two provider verification calls. Then write the memo in the allocator's own format of finding, material finding and veto, and treat every item as a preview rather than a criticism. Fix by control, not by wording: rewriting the DDQ to obscure a weakness converts a finding into a discrepancy, which is worse.

In the real review meeting, allocate the questions deliberately: the COO owns custody mechanics, reconciliation and the counterparty grid; the compliance officer owns onboarding, screening and filings; a director owns governance and the difficult-decision narrative; the founder owns strategy and firm-level questions, and should visibly not answer the operational ones. Three rules of conduct hold throughout: never guess (offer the document instead), never contradict the file, and log every follow-up with an owner and a date.

Findings, Material Findings and Vetoes: Triage

When the memo arrives, triage it by category. Ordinary findings, such as an undocumented decision, a stale review or an untested plan, are remediated on a stated timeline, and the remediation evidenced. Material findings are generally remediated before the raise continues; accepting an allocation "condition" is appropriate only where the fix is already in flight, because a condition that drifts becomes a relationship-defining failure. Vetoes, such as a structural independence defect or a governance design that cannot bind the founder, are not arguments to win but decisions to take back to the drawing board. The most common finding classes in digital asset ODD are predictable: undocumented custody decisions, provider discrepancies, missing valuation independence, and continuity plans that have never been tested. Each is avoidable with the checklist run in advance, and each is far more expensive to fix mid-process than before it.

Staying Passed: The Consistency Audit and Monitoring

The contradiction between two of a manager's own documents is the cheapest failure to prevent and among the most damaging to credibility. Quarterly, read four sources against each other, namely the DDQ, the offering memorandum, the marketing deck and the provider confirmations, and check the standard drift points: reconciliation frequency, NAV cadence, counterparty lists, director roster, AUM basis, fee terms and service-level claims. Record the audit in the change log. Drift is inevitable; undetected drift is optional.

Post-allocation, the exam repeats in lighter form annually: updated DDQ sections, refreshed provider confirmations, incident disclosures and material-change notifications in between. Build the annual refresh into the same quarterly pack cycle, so that monitoring is a subset of maintenance rather than a new project. Managers lose allocations at the monitoring stage for the same reason they fail first exams: staleness. The administrator relationship carries much of this weight, which is one reason administrator selection deserves the same rigour allocators will later apply to it.

How the CV5 Platform Model Helps

ODD Readiness as a Property of the Structure

CV5 Capital is a Cayman Islands-based, CIMA-registered fund platform. For managers operating segregated portfolios within CV5 SPC and CV5 Digital SPC, much of the evidence base this article describes is generated as a byproduct of the platform's governance cycle rather than assembled retrospectively:

  • Regulated chassis: a CIMA-regulated structure with independent administration, audit and board governance in place from launch.
  • Documented frameworks: custody coordination, valuation and counterparty oversight that produce board packs, minutes and reconciliation records in the ordinary course.
  • Operating compliance: an AML programme with appointed officers, screening logs and a maintained filing calendar.
  • Standing pack support: assistance assembling, refreshing and version-controlling the ODD pack as allocator requests arrive.

The allocation of responsibility stays clean: managers retain their investment strategy, branding and investment discretion, and their own regulatory obligations; the fund's directors retain their duties; CV5 Capital provides governance, compliance and operating infrastructure as platform manager, and does not make investment decisions for third-party strategies. The difference is the starting position: the exam opens on a file that already answers it, which is a large part of what makes a digital asset fund credible to institutions. Our wider resources on this discipline are collected in the Governance & ODD Readiness hub.

Risks and Caveats

ODD practice is not uniform: allocator methodologies, document requests and thresholds for material findings vary by institution, mandate and jurisdiction, and nothing here should be read as a description of any specific allocator's process. The domain framework and checklist extract reflect common institutional practice as at July 2026 and will evolve, particularly as custody, staking and tokenisation standards mature. Passing an operational review does not secure an allocation, and a strong operational file does not substitute for strategy, performance or fit. Managers should take legal, regulatory and tax advice on their specific structure and obligations rather than relying on general descriptions of market practice.


Key Takeaways

  • ODD outcomes are largely set by the file: documents first, controls over explanations, and direct verification with providers are the examiner's three working rules.
  • The examination concentrates on seven domains, custody and keys, valuation, counterparties, governance, compliance, resilience and providers, each with a defined evidence set.
  • A standing, version-controlled ODD pack with a named owner and quarterly refresh turns the initial document request from a scramble into a strength.
  • An annual mock exam, run cold by someone outside the team, converts findings into work items before an allocator converts them into a silent no.
  • Material findings are generally fixed before a raise continues; vetoes are structural decisions, not debating points; and the quarterly consistency audit prevents the cheapest failure of all, contradicting yourself.

Open the Exam With the Answers on File

CV5 Capital helps managers launch and operate CIMA-regulated hedge funds and digital asset funds through CV5 SPC and CV5 Digital SPC, with the governance, administration and custody frameworks that institutional ODD teams examine.

Speak with CV5 Capital about assessing your fund against the seven-domain framework before your next allocator conversation.

Schedule a Consultation

Frequently Asked Questions

What is operational due diligence (ODD)?

Operational due diligence is the allocator's examination of a fund's non-investment infrastructure: custody, valuation, counterparty management, governance, compliance, resilience and service providers. It runs alongside investment due diligence and is typically conducted by a separate team with authority to block an allocation on operational grounds alone.

How is ODD different for digital asset funds?

The framework is the same, but the evidence is harder-edged. Key management replaces signatory lists, wallet policies and transaction-policy exports replace bank mandates, counterparty analysis extends to exchanges, stablecoin issuers and staking providers, and asset verification is expected to be demonstrable on-chain and through the administrator rather than by assertion.

What are the most common reasons digital asset funds fail ODD?

Undocumented custody decisions, valuation that is not demonstrably independent of the manager, provider confirmations that contradict the manager's materials, untested incident and continuity plans, and governance that cannot evidence the ability to overrule the founder. Most are remediable; all are cheaper to fix before the examination than during it.

How long does it take to become ODD-ready?

It depends on the starting point. A manager operating within an established platform structure typically inherits administration, governance and custody frameworks that already generate much of the evidence, leaving weeks of assembly work. A standalone launch building policies, testing plans and provider relationships from scratch should generally expect a programme measured in months.

This article is produced by CV5 Capital for general information only and does not constitute legal, regulatory, tax or investment advice. Operational due diligence practice varies by allocator and is described as at July 2026. Fund managers should obtain advice based on their specific structure, investors, strategy and regulatory obligations. CV5 Capital is registered with the Cayman Islands Monetary Authority (CIMA Registration No. 1885380, LEI: 984500C44B2KFE900490).
Ready to Launch Your Fund?
Whether you are launching your first hedge fund or expanding an established investment strategy, CV5 Capital provides the infrastructure, regulatory framework, and operational support required to bring your fund to market quickly and efficiently.