guide

Last updated June 25, 2026

CSSF Fund Depositary Duties: Safekeeping, Oversight and Cash Monitoring Guide

Direct answer

CSSF Fund Depositary Duties: Safekeeping, Oversight and Cash Monitoring Guide helps compliance teams, directors, risk owners, and advisers translate a Luxembourg supervisory topic into owners, evidence, and escalation points. It explains understanding the Luxembourg regulatory obligation, supervisory evidence, internal ownership, and escalation points in CSSF Fund Depositary Duties: Safekeeping, Oversight and Cash Monitoring Guide, then shows how to map the controlling rule, prepare board or compliance evidence, and know when a CSSF-facing specialist should review the file. The later sections connect official sources used, why the depositary role matters to investors, and who can act as depositary so the next step is easier to judge. Read it before assigning owners or responding to a supervisory request, so the evidence file matches the regulatory question.

For practical fund governance, the depositary is one of the main controls between the fund's promises and the fund's operations. It verifies or oversees custody and ownership records, monitors cash flows, checks subscriptions and redemptions, reviews valuation and NAV-related processes where relevant, monitors income application, checks investment restrictions and escalates issues. The exact work depends on fund type, legal framework, assets and delegation model, but the control principle is stable: investor assets and fund transactions should not rely on the manager's word alone.

Official sources used

• CSSF: Depositary

• CSSF: Clarification on eligible entities for AIF cash accounts

• CSSF: Authorisation of a UCI

• CSSF: Authorisation of an AIFM

• CSSF UCITS risk management process guide

• CSSF AIFM risk management guide

• CSSF investment fund regulatory framework guide

Source check date: 20 May 2026. Depositary duties depend on fund type, UCITS or AIF status, AIFM status, asset type, delegation model, cash account structure, CSSF authorisation scope and current legal advice.

Why the depositary role matters to investors

Fund investors rarely see the depositary's daily work, yet depositary discipline is central to fund trust. Investors buy a fund interest, but they depend on a chain of records: asset custody, ownership verification, cash movements, subscriptions, redemptions, valuation, income allocation and investment restriction monitoring. The depositary is one of the actors designed to make that chain less dependent on the manager alone.

The CSSF page states that depositaries act in the best interest of investors and independently. That independence matters because the depositary may need to question or escalate issues involving the fund, manager, administrator or delegate. A depositary that simply follows instructions without challenge would not provide the same protection.

Depositary work does not guarantee investment performance. It does not stop market loss, credit default, valuation difficulty or liquidity stress. Its value is different: it creates operational and legal discipline around assets and fund activity. It helps confirm that assets exist or are recorded, cash is monitored, transactions follow fund documents and problems are escalated.

For ordinary investors, the key takeaway is practical. When reviewing a Luxembourg fund, identify the depositary, understand whether the fund is UCITS or AIF, review the asset type, and read disclosures about custody, valuation, liquidity and conflicts. A reputable depositary is important, but the real question is whether the depositary's role fits the fund's assets and complexity.

Who can act as depositary

The CSSF depositary page states that entities acting as depositaries of Luxembourg-domiciled UCIs are authorised by the CSSF in relation to the legal form of the UCIs, whether UCITS or AIFs, and the status of their AIFM, fully authorised or registered. It also states that Luxembourg-domiciled UCITS or AIFs need to appoint a single depositary among eligible entities.

The page identifies eligible categories including credit institutions, investment firms and professional depositaries of assets other than financial instruments, or PDAOFIs, established in Luxembourg and covered by the Law of 5 April 1993 on the financial sector, as well as Luxembourg branches of EU credit institutions and investment firms. The right category depends on the fund and asset profile.

The single-depositary principle is operationally important. A fund may have many brokers, banks, administrators, delegates or asset-level accounts, but it needs one depositary role responsible for the relevant depositary duties. The file should identify the appointed depositary and how other service providers connect to it.

Prior to starting UCI depositary business activities for Luxembourg domiciled UCIs, the CSSF page says administrative authorisation has to be obtained from the CSSF. New applications are submitted through a specific online questionnaire. Major subsequent change in elements underlying initial approval, such as extension to other investment vehicles or major operational model changes, must be submitted to the CSSF for approval by means of the questionnaire.

Funds and managers should therefore confirm not only that a depositary exists, but that its CSSF authorisation and operational model fit the fund type and assets. A depositary relationship should be reviewed when a fund changes asset class, liquidity structure, cross-border model, delegation chain or investor type.

Safekeeping duties: custody and ownership verification

Safekeeping is the most visible depositary duty, but it is not one single activity. Some assets can be held in custody through accounts and financial instrument chains. Other assets, such as certain private assets, real assets, loans or partnership interests, may require ownership verification and record-keeping rather than traditional custody. The depositary framework must match asset reality.

For listed securities, custody records, reconciliations, settlement controls and sub-custodian oversight may be central. For alternative assets, documentation, registers, contracts, title evidence, valuation support and ownership verification may matter more. The depositary cannot apply a public-equity custody model blindly to a private asset portfolio.

The fund should maintain an asset map. The map should show asset type, holding structure, account or register location, custodian or sub-custodian, ownership evidence, valuation source, reconciliation frequency and exception handling. The depositary should have enough information to perform its duties and escalate gaps.

Safekeeping also interacts with delegation. The CSSF page says UCITS V and AIFMD set strict restrictions under which depositaries are allowed to delegate safekeeping of assets, while delegation of other depositary functions such as cash-flow monitoring and oversight is not permitted except for outsourcing of supporting tasks such as administrative or technical functions. This distinction should be understood before tasks are outsourced.

A practical evidence file includes asset inventory, reconciliation reports, exception logs, due diligence on sub-custodians where applicable, ownership verification records, legal documentation and escalation correspondence. If the fund holds hard-to-custody assets, the file should explain how safekeeping is adapted.

Oversight duties: checking fund operations against rules

Depositary oversight is the part many investors underestimate. The CSSF page states that the depositary ensures transactions made by or on behalf of the fund are carried out according to law, regulation and fund documentation. That means the depositary's role extends beyond asset boxes and account records.

Oversight can include checking issue, redemption, repurchase and cancellation of units or shares; checking valuation procedures and NAV calculations; ensuring consideration for transactions is remitted within usual time limits; ensuring income is applied according to fund documents; and monitoring compliance with investment restrictions. The exact legal detail varies by framework, but the practical logic is that the fund's operations should match what investors were told.

The oversight file should show what the depositary checks, how often it checks, what data it receives, what exceptions it found, how exceptions were resolved and when issues were escalated. A control that is undocumented becomes hard to prove. A control that finds issues but never escalates them becomes weak.

Managers and boards should review depositary oversight findings regularly. If the same issue recurs, the problem may sit in the administrator, portfolio manager, data feed, process design or fund document. Repetition should trigger root-cause review, not only case-by-case closure.

Cash flow monitoring and eligible accounts

Cash flow monitoring is a distinct depositary lane. It connects subscriptions, redemptions, investment cash flows, fees, expenses, financing and asset-level money movements. Weak cash monitoring can create investor-protection risk even when asset custody appears normal.

The CSSF clarification on AIF cash accounts is a useful practical anchor. The CSSF reminded the market that all cash of an AIF has to be booked in cash accounts opened in the name of the relevant AIF, in the name of the AIFM acting on behalf of the AIF, or in the name of the depositary acting on behalf of the AIF with an eligible entity under the AIFM Law framework. It also reminded that for AIFs that appointed a PDAOFI, none of the AIF's cash can be held directly by the PDAOFI itself.

The same clarification explains that only central banks, EU authorised credit institutions and third-country authorised banks, as further clarified through the delegated framework referenced by the CSSF, may qualify as eligible entities for holding cash accounts in the relevant market where cash accounts are required for AIF operations. It also said new AIFs must ensure cash accounts will be held by an eligible entity.

That guidance matters operationally. Fund teams sometimes focus on the convenience of a payment account, EMI or PI setup. The depositary and AIFM must instead check legal eligibility, account naming, cash-flow visibility, reconciliation, investor money handling and documentation.

A cash account map should list every cash account, account holder name, bank or eligible entity, currency, purpose, signatories, reconciliation owner, data access, cash-flow type and exception process. If the structure includes SPVs or asset-level accounts, the fund should explain how cash monitoring reaches those flows where required.

Independence, conflicts and escalation

The CSSF page states that depositaries shall act independently and in the best interest of investors. Independence is not only a legal statement. It should be visible in contracts, governance, reporting lines, conflicts controls, escalation rights and conduct during difficult cases.

Conflicts can arise when the depositary is part of a wider group that provides administration, financing, brokerage, banking or other services. Conflicts can also arise when commercial pressure makes escalation uncomfortable. A mature depositary framework identifies conflicts before they affect judgement.

Escalation is the test of independence. If valuation is late, investment limits are breached, cash flows are unclear, ownership evidence is incomplete, or a manager instruction appears inconsistent with fund documents, the depositary should have a clear route to escalate. That route should include the fund, AIFM or management company, board, CSSF where required, and other parties depending on the issue.

Boards should ask for evidence of escalation, not only a statement that escalation is possible. Past examples, anonymised if necessary, show whether the framework works. No escalations over a long period may mean excellent operations, or it may mean issues are not being surfaced. The board should understand which is true.

Depositary change control

The CSSF depositary page says major subsequent changes of elements underlying initial approval as a UCI depositary, such as extension of initial approval to other investment vehicles or major operational model changes, must be submitted to the CSSF for approval by questionnaire. That requirement belongs in the depositary's own governance, but funds should also monitor whether their service model changes.

A fund may need to replace a depositary, add asset types, move to new markets, alter custody chains, add SPVs, create new compartments, change administrator, expand retail distribution or introduce new liquidity tools. Each change can affect depositary oversight. Treating service-provider change as a procurement matter alone is risky.

Change control should identify the affected funds, legal framework, asset type, operational process, cash accounts, data feeds, reconciliation process, sub-custody chain, outsourcing, CSSF approval need and investor-document impact. It should also set a migration date and fallback plan.

Depositary replacement is especially sensitive. A transition can affect asset records, cash monitoring, NAV oversight, transaction checks and contractual rights. The old and new depositary, AIFM or management company, administrator and board should agree on migration evidence. Investors should receive communication where fund documents or law require it.

The practical standard is simple: no major depositary model change should occur without a written impact assessment. The assessment should state what changes, what remains the same, what approvals are needed, what evidence will prove completion and who owns post-change monitoring.

Depositary duties in ELTIF and private asset structures

ELTIFs, private credit funds, real estate funds, infrastructure funds and other private asset structures can make depositary work more complex. Assets may not be held through a simple custody chain. Ownership may sit through companies, contracts, loan documents, registers, title records or security packages. Cash may move through acquisition, financing, repayment, fee and expense flows.

The CSSF ELTIF page says a depositary agreement may be required if the ELTIF can be marketed to retail investors or on request by the CSSF. For retail ELTIFs, depositary readiness is part of investor protection. The depositary needs to understand the long-term asset strategy, redemption terms, ownership evidence, valuation processes and cash-flow structure.

Private asset depositary oversight should be designed before launch. If the fund will invest through SPVs, the depositary and AIFM should clarify access to records, asset verification, bank accounts, cash movement information, valuation support, transaction documentation and escalation.

For private debt, the depositary should understand loan documentation, cash receipts, collateral and ownership evidence. For real estate, it should understand title documentation, SPV ownership, bank accounts, rental cash flows and valuation timing. For infrastructure, it may need to understand project-company structures and long-term contracts.

These examples show why depositary work must be integrated into product design. Adding the depositary after the investment structure is already designed can reveal gaps late. The better approach is to bring depositary, AIFM, administrator and counsel into the operating-model review before authorisation or launch.

What boards and managers should ask

Boards and managers should not treat depositary reporting as boilerplate. They should ask what the depositary checked, what exceptions were found, what remains unresolved, what recurring themes exist and whether service providers are giving the depositary the information needed to do its work.

The board should also ask whether the depositary receives information on time. A depositary cannot monitor what it cannot see. Delayed administrator reports, incomplete portfolio data, unclear SPV records, missing bank statements or poor valuation files weaken oversight.

If the depositary repeatedly raises similar issues, the board should require root-cause analysis. Repeated late cash reconciliations, stale ownership documents, valuation exceptions or investment restriction warnings suggest a process issue. Closing each item separately may hide the pattern.

Managers should see the depositary as a governance partner, not as an obstacle. A strong depositary can identify problems early, improve evidence, strengthen investor protection and help the fund avoid more serious issues later.

Common failure patterns

The common theme is that depositary work must be specific to the fund. A liquid UCITS, a private credit AIF, a retail ELTIF and a real estate SIF do not have the same asset, cash and oversight profile. The duty categories may be familiar, but the evidence should be fund-specific.

Practical checklist

• Identify the appointed depositary and confirm it fits the fund type and asset profile.

• Map all assets to custody or ownership verification evidence.

• Maintain a complete cash account matrix and eligible-entity analysis.

• Review depositary oversight reports for NAV, dealing, investment restriction and income issues.

• Escalate recurring exceptions to root-cause review.

• Keep conflicts and independence evidence visible to governance bodies.

• Review delegation and outsourcing limits for safekeeping and support tasks.

• Integrate depositary readiness into ELTIF, private asset and new-fund launches.

• Document impact assessment for depositary replacement or major operational model change.

• Verify current CSSF, UCITS, AIFMD and fund-document rules before acting.

Reader action plan

If you manage or govern a Luxembourg fund, ask for the depositary duty map: safekeeping, oversight and cash monitoring. Confirm that each lane has current evidence and unresolved issues are visible.

If you are reviewing a private asset or ELTIF structure, ask how the depositary will verify ownership, monitor cash and oversee transactions before the fund launches. Do not wait until after assets are acquired.

If you are an investor, identify the depositary in the fund documents and read the sections on custody, valuation, liquidity, conflicts and service providers. Depositary oversight does not remove investment risk, but it is part of the operational protection you are relying on.

Worked example: private debt AIF with multiple cash flows

A private debt AIF illustrates why cash monitoring and ownership verification matter. The fund may receive subscriptions, pay expenses, advance loan principal, receive interest, receive repayments, pay management fees, fund drawdowns through SPVs and maintain reserve accounts. If these flows are not mapped, the depositary cannot efficiently monitor whether cash belongs where the fund documents say it should.

The AIFM and depositary should agree on a cash-flow map. The map should identify subscription accounts, operating accounts, loan funding accounts, SPV accounts where relevant, borrower payment accounts, fee accounts, currency accounts and financing accounts. It should also identify which accounts are in the name of the AIF, the AIFM acting on behalf of the AIF, or the depositary acting on behalf of the AIF.

The CSSF's clarification on eligible entities for AIF cash accounts is especially relevant here. Convenience payment arrangements cannot override the eligible-entity requirement. If a payment institution or EMI is considered for operational reasons, the AIFM and depositary must verify whether the setup is permissible. The file should not assume that a payment-service provider is acceptable merely because it can technically hold money.

Ownership verification is also more complex in private debt. The depositary may need evidence of loan agreements, security documents, assignment records, borrower identities, payment schedules and collateral information. It should understand how amendments, waivers, restructurings or defaults are documented.

The board should see depositary exceptions that affect cash or loan ownership. A missing borrower payment, delayed reconciliation, unverified collateral update or unclear SPV account is not just an administrative item. It can affect valuation, liquidity, investor reporting and regulatory confidence.

Worked example: real estate fund with SPV structure

A real estate AIF often invests through special purpose vehicles. The fund may own shares or interests in property companies rather than holding property title directly. Cash may move through rent, expenses, financing, taxes, capital expenditure and distributions. The depositary oversight model needs to understand this structure rather than treating it as a single security position.

The asset map should show each property, SPV, ownership percentage, title evidence, bank accounts, financing arrangements, valuation provider, insurance, property manager and major contract. The depositary may not custody a building in the same way as listed securities, but it should verify ownership records and monitor the supporting evidence expected under the applicable framework.

Cash monitoring should identify rental income accounts, debt-service accounts, operating expense accounts and distribution accounts. If accounts are held at SPV level, the fund should explain what information the depositary receives and how often. Lack of visibility can become a control issue.

Valuation oversight interacts with depositary reporting. If a property valuation is delayed or materially revised, NAV may be affected. The depositary should understand how valuation updates reach the administrator and how exceptions are escalated. The board should see material valuation and ownership-documentation issues together.

When the fund sells a property, the depositary should have a process for transaction evidence, cash receipt, ownership transfer, settlement timing and documentation archive. Real estate transactions can be infrequent but material. The depositary process should be ready before the transaction occurs.

How to review the depositary agreement

A depositary agreement should be read as an operational control document, not only as a legal contract. It should identify the fund, depositary duties, information flows, custody and ownership verification model, cash monitoring, oversight checks, escalation, liability, delegation, conflicts, fees, reporting, termination and transition.

The agreement should match the fund's actual assets. If the fund holds financial instruments in custody, the custody language should be robust. If it holds other assets, the ownership verification and record-keeping provisions should be specific. If the fund uses SPVs, loan structures or real assets, the agreement and operating memorandum should explain information access.

The agreement should also match the operating calendar. Reports should arrive frequently enough for governance. Exception notices should be prompt enough to matter. Escalation should identify contacts and deadlines. Termination provisions should support orderly transition rather than leaving asset and cash records exposed.

Conflicts and delegation provisions deserve special attention. If safekeeping is delegated, the agreement and due diligence file should show how delegate selection, monitoring, liability and information flows are controlled. If other group entities provide services, the conflict framework should be visible.

A board reviewing the agreement should ask whether the depositary can perform its duties with the information promised. If the depositary cannot access timely portfolio, cash, transaction, valuation and ownership data, the agreement may look strong while the actual control environment is weak.

Depositary reporting dashboard

A useful depositary reporting dashboard should be concise but specific. It should show safekeeping status, cash monitoring status, oversight exceptions, unresolved issues, recurring issues, escalation items, service-provider delays, asset-specific concerns and changes since the prior period.

The dashboard should avoid generic green status without evidence. If all areas are green, the pack should still identify what was checked and what data period was covered. If an issue is amber or red, the pack should identify owner, deadline and investor impact assessment.

Boards should request trend information. One exception may be noise; repeated exceptions may be a system issue. Trend turns depositary reporting from periodic compliance into operational intelligence.

The dashboard should also record no-change confirmations where relevant. If there were no new asset types, no depositary model changes, no new cash accounts and no unresolved escalations, that statement is useful. It preserves evidence that the board asked the question.

Due diligence questions for investors and advisers

Investors and advisers do not need to audit the depositary, but they can ask practical questions. Who is the depositary? Is the fund UCITS or AIF? What assets does the fund hold? Are assets held in custody or subject to ownership verification? Are there SPVs? How is cash monitored? What does the annual report say about service providers and risks?

For UCITS, investors may focus on custody chain, investment restrictions, valuation, dealing and liquidity. For AIFs, they may need to understand asset complexity, private asset ownership, depositary type, AIFM status and cash-account structures. For ELTIFs, depositary readiness should be read alongside long-term asset strategy and redemption terms.

Advisers should be careful with phrases such as assets are held by a depositary. That statement may be true but incomplete. Some assets are held in custody; others are verified by records. The risk profile differs. The client should understand whether the fund owns listed securities, loans, property interests, partnership interests or other assets.

A useful investor question is: what would happen if something went wrong? If an asset record is missing, cash is delayed, a NAV input is questionable or a manager instruction conflicts with documents, who detects it and who escalates it? The answer reveals the practical value of the depositary framework.

Depositary oversight does not make a risky asset safe. It makes the operating chain more controlled. Investors still need to assess investment risk, liquidity, valuation, leverage, fees, tax, suitability and time horizon.

Quality assurance for depositary-related files

Before a fund launch, amendment, ELTIF filing or service-provider change, the team should run a depositary QA review. The review should compare fund documents, depositary agreement, asset map, cash account matrix, valuation process, administrator flows, delegation map, board resolutions and CSSF submission materials.

The QA review should test names and dates. Fund name, compartment, AIFM, depositary, administrator, bank account holder, asset list and document versions should be identical across the file. Small inconsistencies can create large review questions because they suggest weak control over the submission.

The review should test operational feasibility. Can the depositary receive the data needed for safekeeping, oversight and cash monitoring? Are data formats agreed? Are cut-off times realistic? Are escalation contacts current? Are private asset documents accessible? Are SPV accounts visible? Can exceptions be reported before board meetings?

The review should test legal fit. Does the depositary category fit the fund and assets? Are cash accounts held with eligible entities where required? Are delegation arrangements within permitted boundaries? Are major operational model changes submitted where approval is needed? Is retail ELTIF depositary evidence available where required?

The QA output should be a short issue log. Each issue should have severity, owner, document affected, correction needed and closure evidence. The launch or change should not proceed while material depositary issues remain unresolved unless governance bodies explicitly accept and monitor the residual risk.

Operational playbook for a depositary exception

A depositary exception should follow a clear path. First, identify the exception type: asset record, cash flow, NAV, valuation, investment restriction, income allocation, transaction settlement, manager instruction, delegate delay or documentation gap. Second, classify severity. Third, assign owner. Fourth, identify investor impact. Fifth, decide escalation. Sixth, record closure evidence. This sequence sounds basic, but it prevents informal issue handling.

For an asset-record exception, the depositary may need missing title documents, custodian confirmation, register evidence, SPV documents, loan agreements or security evidence. The AIFM or management company should provide documents quickly and explain whether valuation or investor reporting is affected. If ownership cannot be verified promptly, the board should know.

For a cash exception, the first question is whether the cash movement is expected, authorised and booked in the right account. The second question is whether the account is held with an eligible entity where required. The third question is whether subscriptions, redemptions, investment cash flows or fees are affected. A small unmatched cash item can reveal a larger mapping problem.

For a valuation exception, the depositary should understand whether the issue is missing data, stale price, model uncertainty, late valuation committee decision, administrator calculation issue or manager challenge. The fund should decide whether NAV, dealing, investor communication or board reporting is affected.

For an investment restriction exception, the team should identify whether the breach is active, passive, technical, data-related or caused by market movement. It should assess correction path, investor impact, CSSF or depositary communication and recurrence risk. The depositary should not be left with an unresolved explanation.

How depositary evidence supports CSSF readiness

CSSF readiness is not only about having policies. It is about being able to show how the fund operates. Depositary evidence is important because it touches assets, cash, transactions, valuation and compliance. If the CSSF, an auditor, a board or an investor asks how the fund protects operational integrity, depositary evidence is often central.

The readiness file should include the depositary appointment, authorisation or eligibility context, fund list, asset map, cash account matrix, oversight plan, reporting calendar, escalation process, delegation map, conflict assessment and recent issue log. For private assets, it should include ownership-verification methods. For retail ELTIFs, it should connect to the depositary agreement and investor-facing documents.

The file should be organised so a reviewer can answer five questions quickly: who is the depositary, what duties apply, what assets and cash are covered, what exceptions exist, and what governance body reviews unresolved issues. If a reviewer must search across contracts, emails and spreadsheets for these answers, the evidence model is too fragile.

Depositary evidence also helps during service-provider change. If a depositary is replaced, a clean evidence file supports migration, handover, reconciliation and board comfort. If the evidence is scattered, transition risk rises. The same applies when a fund adds private assets, opens new cash accounts or changes administrator.

For managers, the discipline is practical: do not wait for a CSSF question to assemble depositary evidence. Keep it current as part of ordinary governance. That habit reduces stress during audits, regulator interactions, product launches and investor diligence.

Management review questions

Management and boards should review depositary arrangements with direct questions. Does the depositary's authorisation scope fit the fund? Are all assets mapped? Are private assets supported by ownership-verification evidence? Are all cash accounts identified and eligible? Are exceptions resolved on time? Are conflicts documented? Are model changes or asset changes reviewed before implementation?

The review should also ask what evidence would be produced if the CSSF asked tomorrow. A strong file can produce the depositary agreement, asset map, cash account matrix, oversight reports, exception logs, escalation records, conflict assessment and change-control memos quickly. A weak file relies on individuals remembering where documents sit.

For private asset funds and ELTIFs, management should ask whether the depositary was involved early enough. If the product structure was designed before depositary input, there may be gaps in ownership verification, SPV visibility, cash-flow monitoring or reporting timing. Early depositary involvement is cheaper than late correction.

The final review should produce actions, not only comfort. If the cash matrix is incomplete, assign an owner. If the depositary dashboard is too generic, request better reporting. If private asset evidence is fragmented, build an asset file. If conflicts are not visible, update the conflict register. This is how depositary oversight becomes a living control.

The final question is whether the board can distinguish investment risk from operational custody and oversight risk. A fund may lose money for legitimate market reasons while depositary controls work properly. It may also appear stable while asset records, cash visibility or oversight evidence are weak. Good governance separates those questions and demands evidence for both.

That distinction should shape reporting. Performance reports explain what happened to investments. Depositary reports explain whether assets, cash and operating actions were controlled in accordance with the applicable framework and fund documents. A board that sees only performance may miss control weaknesses; a board that sees only control checklists may miss the economic context. The useful pack brings both views together without confusing them.

In practice, the final board pack should include the depositary duty map, asset and cash matrices, unresolved exception list, recent oversight report, conflict summary, service-provider change log and any open CSSF or auditor questions. If the fund is private-asset-heavy, the pack should also show ownership-verification status and SPV visibility. If the fund is retail-facing, investor-impact assessment should be more explicit.

The board should close the review by asking what will be different next quarter. If the answer is nothing despite repeated exceptions, the process is not learning. Depositary oversight should create feedback: better documents, cleaner account maps, faster escalations, clearer reports and fewer recurring gaps. That feedback loop is what turns a formal appointment into a practical investor-protection control.

Where the answer is uncertain, the uncertainty should be written down with an owner and a review date.

That last sentence often prevents avoidable drift.

For a public-facing reader, the lesson is direct: a depositary is valuable because it creates a second control perspective over assets, cash and fund operations. The reader should still judge the investment on its own merits, but should also ask whether the operating chain is evidenced well enough to protect investors when records, cash movements or fund actions become difficult.

The strongest depositary review packs also show what is out of scope and why. If the depositary does not directly custody a private asset, the ownership-verification method should be named. If cash is held through a structure with several accounts, the monitoring perimeter should be explicit. If supporting tasks are outsourced, the file should explain what remains with the depositary and how oversight of the support provider is performed. These boundaries prevent overconfidence.