Studio Asset Safety

KryptoGO Studio organisational controls

• Permanent transaction records — timestamps, on-chain hashes, amounts, asset types, recipient KYC information — all preserved with search and filter functions to quickly locate any transaction record.
• Multi-tier approval mechanism: every transaction is processed by the handler, reviewer, and approver before being sent to the blockchain, with the full audit trail preserved.

For the platform-wide security posture (ISO 27001 / 27701 certified, SOC 2 Type II examined, Cure53 audited, KMS-managed keys, Shamir’s-Secret-Sharing for embedded self-custody), see Compliance & Certifications.

Treasury private key — common questions

Can I withdraw the Treasury private key at any time?

Technically yes — you can export it at any time. For security reasons, once the private key is exported it cannot be re-imported into the same AssetPro organisation. If you wish to continue using Studio after an export, KryptoGO creates a new organisation and Treasury for you.

• During the contract period, if you request to export the private key, KryptoGO is responsible for the export and delivery (the private key is delivered, and the original Treasury closed, within 2 business days after the formal request).
• Even if KryptoGO were to suddenly go bankrupt or company servers crashed, as long as the Google Cloud KMS service is functioning, the private key can still be exported and delivered to the client.

Can I import my own private key into Studio?

KryptoGO Studio is only responsible for the security of private keys and Treasury generated for you when creating the organisation. If you wish to import your own private key, a separate service agreement is required, and KryptoGO cannot guarantee the on-chain security of that key, as it may have interacted with systems outside of KryptoGO services.