The RFP for a new custodian usually goes out because the board wants to save a few basis points on asset servicing. The procurement team runs a tight process. The business case shows millions in annual fee savings. Then the enterprise architect projects a dependency graph showing the incumbent’s daily flat files feeding forty downstream systems, from risk management to regulatory reporting. The architect estimates the IT rebuild at three years and a multiple of the projected savings. The migration project is quietly canceled. The fund renews the contract.

Every large fund has a custodian it cannot leave. Most of them cannot say exactly why, other than pointing to the termination notice period. The contract says twelve months. The integration says three years.

The fund owns the assets. It does not own the records that describe them. Over a ten-year relationship, a custodian stops being just a safekeeping and settlement agent. It becomes the general ledger, the performance reporting engine, and the single point of failure for the nightly batch run. You did not buy a custody service. You bought a proprietary data model with a bank attached.

Procurement often finds a favorable data ownership clause in the master services agreement. The contract states the fund owns its data and the custodian will return it upon termination, in the format in which it is maintained.

That phrase is the trap. The format in which it is maintained is the custodian’s proprietary format. The fund gets the raw rows, but it does not get the data dictionary, the transformation logic, or the history of manual overrides. A right to receive data is less useful without a right to receive enough context to interpret it. Data ownership is a legal clause. Data control is an operational capability. Most funds have the first and lack the second.

The lock-in is rarely in the core payment instructions. Standard messaging formats handle the happy path of trade settlement. The complexity lives in the supplemental data feeds.

Custodians enrich data. They add issuer hierarchies, credit ratings, tax classifications, and corporate action entitlements. Downstream systems start relying on these enriched fields rather than sourcing them independently. When the fund’s internal risk system needs a specific derivative classification, it reads it from the custodian’s feed.

To manage this, IT often builds a shadow ledger or an internal investment book of record to double-check the custodian’s math. But to make the shadow ledger match the daily feed, IT has to replicate the exact timing and calculation quirks of the custodian. The shadow ledger is not an independent check. It is a mirror of the vendor’s specific flaws. The fund’s reconciliation process becomes a confession that it does not own its own books.

The dependency extends to the operations floor. Standard messages only cover standard events. When trades fail, when corporate actions are complex, or when tax withholding requires manual intervention, the operations team logs into the custodian’s proprietary web portal to resolve the exception.

Over time, the team builds its entire daily workflow around this specific portal. The fund keeps a folder of custodian exceptions that has been growing for a decade. Nobody has read the whole thing. When a custodian account manager retires, the fund sometimes discovers he was the only person who knew why a particular exception existed. The knowledge leaves with him.

If your operations team spends four hours a day in the vendor’s portal, that vendor dictates your operating model. Moving to a new custodian means retraining the entire floor on a new way to resolve breaks. The new custodian will have different quirks. The exception log starts over.

When a fund finally forces a migration, the assets move in a week. The data and process transition takes years.

The hardest part of the switch is deciding whose numbers are authoritative during the overlap. The fund must run the old and new custodians in parallel. This requires double the operational staff and custom reconciliation logic to explain the inevitable discrepancies. Custodian A and Custodian B might report a difference in the net asset value of a major fund. After fourteen hours of tracing trades, the team realizes the discrepancy comes down to a different data vendor being used for local currency spot rates at market close. Neither is wrong, but the internal accounting systems can only accept one version of the truth.

Parallel running is where two plausible answers become a staffing problem. The exit work competes with live operations. The people who understand the exceptions still have to close the books, service events, and meet regulatory reporting dates during the migration.

Positions and cash balances are straightforward to move. The derived data is the hard part. Tax lots, net asset value history, income accruals, and performance composites do not move neatly.

A transition team might ask for ten years of transactions. The incumbent supplies files with field descriptions but no record of how historical corrections were applied. The receiving team can load the transactions, but it cannot reproduce the signed year-end reports. Tax lot reconstruction alone can run past the first tax year, requiring amended returns in multiple jurisdictions.

Furthermore, the incumbent remains a participant long after the assets leave. Open claims, late corporate action adjustments, and prior-period queries keep access and support necessary well past the transfer date. The exit fee is only one line in the cost of leaving. Transition assistance is priced at the value of your inertia.

The leverage curve is steep. Maximum leverage exists at the RFP. At renewal, you are negotiating against your own switching cost. At termination, you have none.

Custodians front-load the cost of onboarding and amortize it over a long relationship. If the fund tries to leave in year five, it faces massive termination penalties, often disguised as deconversion data extraction fees.

To change the physics, the fund has to treat the exit as a procurement requirement, not an afterthought. The master services agreement must include specific technical formats for deconversion data, a guaranteed service level agreement for providing it, historical depth, and a hard cap on extraction fees.

The fund also needs to own its reference data. Sourcing independent pricing, corporate action, and reference data costs money, but it prevents the custodian from becoming the sole arbiter of truth. It is the cheapest form of independence. Downstream systems should connect to an internal data layer that translates the custodian’s proprietary format into an internal standard, rather than consuming the feed directly.

A regulatory exit plan is a document. An operational exit plan is a program. Most funds only have the first. The useful test of portability is not whether legal can point to a clause, but whether a new team can reproduce a reporting period from the supplied records. If the fund cannot produce its own position statement without the custodian’s file, it cannot leave, regardless of what the contract says.