# Article 6 — Custody and administration policy **Commission Delegated Regulation (EU) 2025/303 · binding · OJ L, 2025/303, 20.2.2025 · dated 31 Oct 2024 [in force]** *In force · Commission Delegated Regulation (EU) 2025/303, OJ L, 2025/303, 20.2.2025 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/reg_del/2025/303/oj/eng)* For the purposes of [Article 60(7)](../../articles/60.md), point (e), of Regulation (EU) 2023/1114, the notifying entity shall provide to the competent authority the following information:\ a) a description of the arrangements linked to the type of custody offered to clients, a copy of the notifying entity’s standard agreement for the custody and administration of crypto-assets on behalf of clients pursuant to [Article 75(1)](../../articles/75.md) of Regulation (EU) 2023/1114 and a copy of the summary of the custody policy made available to clients in accordance with [Article 75(3)](../../articles/75.md) third subparagraph of that Regulation;\ b) the notifying entity’s custody and administration policy, including a description of identified sources of operational and ICT risks for the safekeeping and control of the crypto-assets or the means of access to the crypto-assets of clients, together with the following:\ i) the policies and procedures, and a description of the arrangements to comply with [Article 75(8)](../../articles/75.md) of Regulation (EU) 2023/1114;\ ii) the policies and procedures, and a description of the systems and controls, to manage the operational and ICT risks, including where the custody and administration of crypto-assets on behalf of clients is outsourced to a third party;\ iii) the policies and procedures relating to, and a description of, the systems to ensure the exercise of the rights attached to the crypto-assets by the clients;\ iv) the policies and procedures relatig to, and a description of, the systems ensuring the return of crypto-assets or the means of access to the clients;\ c) information on how the crypto-assets and the means of access to the crypto-assets of the clients are identified;\ d) information on arrangements to minimise the risk of loss of crypto-assets or means of access to crypto-assets;\ e) where the crypto-asset service provider has delegated the provision of custody and administration of crypto-assets on behalf of clients to a third-party:\ i) information on the identity of any third-party providing the service of custody and administration of crypto-assets and its status in accordance with [Article 59](../../articles/59.md) or [Article 60](../../articles/60.md) of Regulation (EU) 2023/1114;\ ii) a description of any functions relating to the custody and administration of crypto-assets delegated by the crypto-asset service provider, the list of any delegates and sub-delegates, as applicable, and any conflict of interest that could arise from such a delegation;\ iii) a description of how the notifying entity intends to supervise the delegations or sub-delegations.