Type 13 Depositary Services: Custody and Oversight Duties

A fund depositary is more than a vault or account provider. Under the SFC’s Type 13 framework, the depositary combines asset custody with oversight of important fund processes. The regime is designed to provide checks around property belonging to an SFC-authorized collective investment scheme (CIS), including when a manager, custodian, or other service provider performs operational work.

Which services are in scope

The SFO describes Type 13 as providing depositary services for a relevant CIS. The SFC’s licensing guidance generally expects the depositary at the top of the custodial chain for an SFC-authorized CIS to be licensed or registered for Type 13, subject to specified exceptions. The precise entity and scheme must be analyzed: not every service marketed as fund administration, custody, or transfer agency is automatically Type 13.

The SFC explains that fund administration or transfer-agent work, by itself, does not constitute Type 13. A person whose only functions are those services is generally not required to be licensed or registered for Type 13 on that basis alone. By contrast, staff who take on oversight to check operation against scheme documents, or who approve custody-related payments and asset transfers where the depositary performs custody operations, may need the relevant individual status and accreditation.

Custody and safekeeping

Custody focuses on holding and safeguarding relevant CIS property. The depositary should know what property belongs to the scheme, where it is held, who can issue instructions, and how records establish ownership and movement. Effective controls address segregation, reconciliation, access rights, settlement, corporate actions, and escalation of breaks. When assets are held through sub-custodians or other parties, the depositary needs appropriate due diligence and monitoring rather than assuming that a chain of contracts removes risk.

A practical control design ties each asset class to a custody arrangement, record source, reconciliation frequency, exception threshold, and responsible reviewer. A cash mismatch or missing security should be recorded, investigated, escalated, and resolved with evidence. Approval limits should prevent one person from initiating and completing a material transfer without an independent check.

Oversight is an active function

The SFC’s additional requirements state that where a requirement is an oversight function, the depositary should perform ex post controls and assess processes and procedures under the responsibility of the management company, the CIS, a delegate, or an appointed third party. If an oversight matter is in practice performed by the depositary itself, it assumes the primary obligation for that activity. Oversight therefore means testing and follow-up, not merely receiving periodic reports.

The work should be anchored in the scheme documents. Depending on the requirement, the depositary may monitor issue and redemption processes, valuation and pricing, investment and borrowing limits, cash flows, settlement, and income allocation. It should understand which party performs each control, obtain enough reliable evidence to assess it, define exceptions, and escalate material failures. A service-level agreement can allocate tasks but does not make an ineffective oversight process sound.

Who is the client and what is client property

The SFC Code of Conduct FAQ says that, in general, the ‘client’ for an RA13 intermediary is all participants, shareholders, or unitholders of the relevant CIS collectively. The SFC also explains that relevant CIS property is client assets for the purpose of the Code’s client-asset provisions. These points matter when considering duties, complaints, safekeeping, and communications.

Complaints, conflicts, and delegation

A complaint about custody or the depositary’s oversight should be handled under the relevant Code of Conduct complaint requirements. If a complaint concerns the manager or another operator, the depositary should have measures to ensure that the operator handles it consistently with those requirements. Depositaries may also have other businesses; the SFC expects adequate and effective controls to maintain confidentiality and manage actual or potential conflicts.

Delegation does not remove the need to select capable providers, define responsibilities, receive information, monitor performance, and respond to incidents. A useful exam answer distinguishes physical custody from oversight: custody is the direct safekeeping function; oversight is the independent checking and assessment of processes, including processes carried out by other parties.

Exam checklist

• Identify whether the scheme is a relevant CIS and which entity is the depositary at the top of the custody chain.
• Separate Type 13 depositary work from fund administration or transfer agency performed alone.
• Cover both custody/safekeeping and oversight against scheme documents.
• Explain that delegated processes require ex post assessment, evidence, follow-up, and escalation.
• Remember that if the depositary itself performs an oversight activity in practice, primary responsibility attaches to that work.

Begin with the trust deed, offering documents, custody agreements, and applicable product code. For every depositary duty, name the party that performs the operational step, the evidence the depositary receives, how often it tests the step, and the escalation route for an exception. This makes oversight testable. A document that merely says “the manager is responsible” is not enough if the depositary must independently check the manager’s compliance.

Custody controls and oversight evidence

For custody, reconcile holdings and cash across independent records, monitor access permissions, verify settlement and corporate actions, and investigate unmatched items. For oversight, test whether subscriptions, redemptions, valuation, income distribution, and investment restrictions follow scheme documents. The specific duties vary with the relevant CIS and legal framework; use the requirements that actually apply rather than treating every fund as identical. Keep dated test records, exception logs, follow-up evidence, and closure approvals.

Delegation changes execution, not accountability

A depositary may use another provider for custody or operational tasks, but should perform appropriate due diligence, set clear service standards, monitor performance, and respond to failures. Ex post oversight means assessing the process after the responsible party performs it and following up when controls fail; it is more than collecting a certification. If the depositary itself undertakes a function, it should recognize that it assumes the primary obligation for that work.

Example and exam takeaway

A fund manager reports that a portfolio limit was breached and corrected. A depositary should assess the breach, determine whether the scheme documents and applicable rules were followed, examine remediation evidence, consider investor impact, and escalate as required. It should not merely file the manager’s email. For exam questions, distinguish safekeeping, oversight, delegation, and primary responsibility; then tie each to the scheme documents and evidence.