Wealth Management — Article 11 of 12

API-First Custody and Reporting

9 min read

For most of banking history, the custody system was also the reporting system, the transaction system, and the client-interface system. A single monolithic application handled positions, trades, corporate actions, tax lots, statements, and client portals. That architecture made sense when the only consumer of the data was an internal operations team and the client got a paper statement.

It does not make sense now. The client expects real-time views. The advisor expects the same. Downstream systems — performance reporting, planning software, rebalancing engines, compliance surveillance — all need the same data, and waiting for the nightly batch is not acceptable. The architectural answer is API-first custody: the custody system becomes the system of record, and everything else consumes it through well-designed APIs.

The question is not whether custody should be API-first. It is whether the firm is going to do the unbundling deliberately or have it happen as emergency remediation after the monolith breaks.

What API-first custody actually means

The phrase gets used loosely. Three distinct levels of maturity:

Level 1: Read APIs over the monolith. The legacy custody system stays, and APIs are added to expose positions, transactions, and balances. Still batch-refreshed internally, but external consumers can query without waiting for reports. Most common starting point. Low risk, modest benefit.

Level 2: Event-driven custody. Every material event — trade settlement, corporate action, transfer, journal — emits an event on an internal bus. Downstream systems subscribe rather than polling. Changes propagate in seconds or minutes rather than the next batch cycle. Requires genuine architecture work on the custody platform.

Level 3: Decomposed custody services. The custody monolith is broken into services — position keeping, corporate action processing, transfer agency, tax lot accounting — each with defined APIs. This is genuine microservices architecture applied to custody. Rare and difficult to achieve, but it is the only architecture that fully supports modern wealth platform requirements.

CapabilityLevel 1 (APIs over monolith)Level 2 (Event-driven)Level 3 (Decomposed)
Data freshnessNear real-time readReal-time with eventsReal-time, per-service
Time to deliver6–12 months18–24 months3+ years
Risk of disruptionLowMediumHigh
Ceiling on future capabilityMediumHighHighest

Why private banks keep stalling

The resistance to unbundling custody comes from legitimate concerns, not just inertia.

Regulatory and fiduciary accountability. The custody system is the legal record of what the bank holds for its clients. Touching it introduces risk that concerns regulators, auditors, and boards. Modernization has to be executed with extreme care, which makes it slow and expensive.

The business case looks like cost without revenue. Unbundling custody does not win new clients directly. It enables other systems — better portals, faster reporting, more flexible rebalancing — to be built. The benefit is diffuse and downstream; the cost is concentrated and upfront. CFOs push back.

Vendor lock-in. Large custody platforms (DST/SS&C, Broadridge, BNY Mellon's systems, the major private bank internal platforms) are integrated ecosystems. Exposing clean APIs requires negotiating with the vendor or building the abstraction layer. Neither is cheap.

Operational process dependencies. Thousands of operational processes — from tax reporting to regulatory filings to client statement generation — depend on the current system's outputs in specific formats. Changing how data flows in requires re-engineering how data flows out. This is where budgets blow up.

The honest timeline. Level 1 (read APIs) is a 6–12 month project. Level 2 (event-driven) is 18–24 months. Level 3 (decomposed services) is 3–5 years for a mid-sized private bank and rarely finishes on the original schedule. Firms that promise Level 3 in 18 months are selling.

What the architecture should look like

Firms doing this well follow a similar pattern. The custody system stops being a user-facing application and becomes infrastructure. The advisor workbench, client portal, reporting system, and planning tools are separate applications that consume custody APIs. Authentication and authorization sit in a shared identity layer, not embedded in the custody system.

APIs are designed for consumers, not reflecting internal structure. The temptation is to expose what the legacy system already produces. Better APIs are designed based on what the consumers need — portfolio views, transaction history, tax lot detail — with internal transformations if needed.

Events are first-class. Trade settlement, corporate action, transfer, cash movement — each emits an event. Downstream systems subscribe. This enables real-time portfolio views, real-time compliance surveillance, and real-time client notifications without polling or waiting for batches.

Read and write are separated. Read APIs are heavily used, broadly consumed, and relatively low-risk. Write APIs — placing trades, initiating transfers — are far more sensitive and require different controls. The two should not share authentication scope or rate limiting.

Data contracts are versioned. APIs change. Consumers break. Without explicit contract versioning, every API change becomes a coordinated release across all consumers, which becomes impossible at scale. Versioned contracts let consumers upgrade on their own schedule.

Architecture checklist for API-first custody
  • Positions and transactions exposed through well-designed read APIs
  • Material events emitted on an internal event bus
  • Consumer-oriented API design, not internal system reflection
  • Versioned contracts with deprecation policies
  • Separate authentication and controls for read vs. write
  • Audit logging on all sensitive reads and every write
  • Rate limiting and quota management per consumer
  • Documented service-level objectives per API

What to avoid

Two traps.

The API gateway that pretends to be modernization. Putting an API gateway in front of a legacy system and calling it "API-first" is common and only partially useful. The data behind the APIs is still batch-refreshed, still coupled, still constrained by the legacy system's model. The external view improved; nothing else did.

Building point-to-point integrations instead of a proper platform. A system that integrates with "the advisor workbench" and separately integrates with "the client portal" and separately with "the planning tool" is not API-first. It is three integrations. The platform view requires one set of APIs consumed by many applications.

Firms planning custody modernization should look at the banking architecture capability model, which maps custody against adjacent capabilities like settlement, corporate actions, and client reporting — useful for understanding where investment produces the most leverage and where it is merely necessary maintenance.

Frequently Asked Questions

Can a firm skip Level 1 and go straight to Level 2 or 3?

In theory yes, in practice rarely. Level 1 forces the firm to understand consumer requirements, establish versioned contracts, and build the operational muscle for API management. Skipping this foundation makes Levels 2 and 3 substantially more likely to fail. Most firms that have made it to Level 3 went through Level 1 first, even when they wished they had not needed to.

How do regulators view API-first custody architectures?

Regulators care about the same things they always have: accuracy of records, proper controls, auditability, and fiduciary accountability. API architectures do not change these obligations but can make them easier to meet — immutable audit logs, granular access controls, and clear data lineage are easier to build in modern architectures than in legacy monoliths. Regulators are comfortable with these architectures when properly designed.

What does the client actually experience from API-first custody?

Directly, very little changes at the client level. Indirectly, a great deal changes: real-time portfolio views, faster reporting, better mobile experiences, more responsive planning software, and fewer "I will get back to you on that" moments from advisors. The client benefit is downstream of the architecture benefit, which is why the business case is diffuse.