How to Build an Investment Policy Statement for Cryptocurrency Allocation

Imagine your investment committee is debating whether to add Bitcoin or Ethereum to the portfolio. The price just spiked 20% in a week. Do you buy more? Or do you sell to lock in gains? Without a clear plan, that decision comes down to gut feeling-and gut feelings are expensive when you’re managing fiduciary assets.

An Investment Policy Statement (IPS) is a formal governance document that outlines policies, procedures, and guidelines to guide organizations through volatile markets by establishing clear investment objectives, risk parameters, and asset allocation strategies. For most traditional assets like stocks and bonds, writing an IPS is routine. But adding cryptocurrency changes the game entirely. Crypto isn’t just another stock with higher volatility; it’s a distinct asset class with unique custody risks, regulatory uncertainties, and correlation patterns that can shift overnight.

If you’re building an IPS that includes digital assets, you need more than a generic clause. You need specific guardrails that protect your organization from unintended concentration, operational failures, and fiduciary lawsuits. Here is how to build a robust framework for cryptocurrency allocation.

Define Your Strategic Asset Allocation Bands

The first step is deciding exactly how much crypto belongs in the portfolio. This isn’t about predicting prices; it’s about defining your risk tolerance. Most institutional frameworks treat crypto as a small, opportunistic satellite allocation rather than a core holding.

You should establish three numbers: a minimum, a target, and a maximum. This structure prevents the portfolio from drifting too far out of alignment during market swings. For example, a conservative endowment might set bands at 0% minimum, 1% target, and 3% maximum. An aggressive growth fund might use 2% minimum, 5% target, and 10% maximum.

Notice the rebalancing trigger column. This is critical. Because crypto can surge 50% in a month, a 5% target allocation could quickly become 8% or 9%, pushing you over your maximum risk limit. Your IPS must mandate automatic rebalancing when the allocation breaches these thresholds. Morgan Stanley’s research highlights that regular rebalancing is the primary tool for preventing unintended concentration after strong performance periods.

Select Permissible Instruments and Custody Solutions

Not all ways to invest in crypto are created equal. Your IPS needs to specify exactly which instruments are allowed. Are you buying direct ownership of Bitcoin on a blockchain? Are you using spot ETFs? Futures contracts? Or tokenized funds?

Each option carries different operational risks. Direct ownership requires specialized custody solutions. Only about 17% of traditional custodians offered integrated crypto solutions as of mid-2026. If your current custodian doesn’t support self-custody or multi-signature wallets, you may need a third-party provider like Fidelity Digital Assets or Coinbase Institutional.

Your IPS should explicitly state:

• Which specific cryptocurrencies are permitted (e.g., Bitcoin and Ethereum only, versus a broader basket).
• Whether derivative products like futures or options are allowed.
• The required custody standard (e.g., cold storage with multi-sig authentication).
• Prohibition of unregulated exchanges or decentralized finance (DeFi) protocols unless specifically approved.

This specificity protects you against fraud and loss. The SEC’s 2025 enforcement actions targeted retirement plans that lacked adequate disclosure about cybersecurity risks. By naming approved custodians and prohibiting high-risk venues, you create a defensible paper trail.

Establish Rebalancing Protocols and Triggers

Volatility is the double-edged sword of crypto. It creates opportunity but also danger. Without strict rebalancing rules, your portfolio’s risk profile can drift silently. Imagine Bitcoin rallies 100% in six months. A 5% allocation becomes 10%. If you don’t sell into strength, you’re now exposed to twice the intended risk.

Your IPS should define two types of rebalancing:

1. Scheduled Rebalancing: Quarterly or semi-annual reviews where the committee assesses performance and adjusts allocations back to target.
2. Trigger-Based Rebalancing: Automatic adjustments when an asset class deviates beyond its band limits (e.g., ±1% or ±2%).

For crypto, trigger-based rebalancing is essential. Given that Bitcoin’s 90-day realized volatility averaged 65% in 2025 compared to 15% for the S&P 500, waiting for quarterly reviews is too slow. You need real-time monitoring tools that alert the investment team when allocations breach thresholds.

Additionally, consider dynamic allocation bands. Some platforms, like Vanguard’s institutional service, automatically tighten bands during periods of extreme volatility (above 50% annualized). This reduces exposure precisely when risk is highest.

Incorporate Fiduciary Safeguards and Education Requirements

Crypto remains controversial among regulators and traditional investors. To protect your organization from legal challenges, your IPS must include fiduciary safeguards. These aren’t just bureaucratic hurdles-they’re necessary protections.

First, require mandatory education for anyone involved in the decision-making process. Basic Capital’s 2024 guide recommends that participants complete an educational program on alternative investments before allocating funds. For institutional committees, this means ensuring members understand blockchain fundamentals, valuation methodologies, and liquidity constraints.

Second, document the due diligence process. The Department of Labor’s 2026 guidance states that cryptocurrency allocations must undergo the same rigorous review as any other investment option. Keep records of:

• Committee meeting minutes discussing crypto inclusion.
• Risk assessments evaluating volatility, correlation, and counterparty risk.
• Vendor evaluations for custodians and trading platforms.
• Performance benchmarks used to evaluate success.

This documentation proves you acted prudently. In 2025, ERISA lawsuits involving excessive crypto allocations resulted in $417 million in settlement costs. Proper documentation is your best defense.

Address Regulatory Compliance and Reporting

The regulatory landscape for digital assets is evolving rapidly. As of 2026, the SEC’s Digital Asset Custody Rule requires specific language in IPS documents regarding protection against loss from cybersecurity risks, theft, and fraud. Ignoring these requirements can lead to fines or forced liquidation.

Your IPS should include a compliance section that:

• References current SEC and DOL regulations.
• Outlines reporting requirements for tax purposes (e.g., Form 8941 for crypto transactions).
• Specifies how ESG metrics apply to crypto (e.g., preferring proof-of-stake networks over proof-of-work due to energy concerns).
• Defines audit procedures for verifying holdings and transaction history.

Also, consider jurisdictional differences. If your organization operates globally, note which countries restrict or ban certain crypto activities. This prevents accidental non-compliance when executing trades across borders.