Institutional Custody & Securities Services — impact tolerance ≤ 4 hours — ITOL

Impact tolerance: ≤ 4 hours — during corporate-action election and income-distribution windows across the ≈ $350B book. Outside those windows same-day recovery holds — but position records must be exact on restoration, which is the harder promise (illustrative default — trace the derivation, then replace with your own harm analysis)

Definition: Safekeep and service ≈ $350B of institutional client assets. That means settling client-directed trades, collecting and distributing interest and dividend income, processing corporate actions and client elections, and maintaining the position records that are the clients' legal evidence of ownership. Distinct from trust-custody's fiduciary administration — here the bank acts on instruction as custodian, and the record itself is the product. Applies only where the bank runs an institutional custody business at scale. Without one, safekeeping obligations fold into trust-custody.

Why it is designated: The OCC's Custody Services handbook states the duties plainly: settle trades, collect income, process corporate actions per instruction. It also holds the custodian liable for client losses when it does not. The clocks are external. Issuers and depositories set corporate-action election windows, income is contractually due on payable date, and client trades settle T+1 (one business day after the trade). Four hours keeps an outage inside the same day's election and income cutoffs across ≈ $350B AUC (assets under custody). But availability is the lesser obligation here. Custody records are property records, and a restored system holding wrong positions has not recovered anything. The tolerance is therefore paired with a zero-loss integrity floor that binds harder than the clock.