Private keys are protected within the cryptographic infrastructure used for your organisation's custody deployment and are not exposed to users through BE Custody Web or the Bitpanda Custody iOS app.
BE Custody uses Hardware Security Modules (HSMs) as part of its custody architecture to protect sensitive cryptographic operations and key material.
The exact HSM deployment model can vary depending on your organisation's custody setup. For example, some deployments may use HSM infrastructure operated as part of the BE Custody environment, while supported on-premises models may place the HSM responsible for final blockchain signing within the client's environment.
For more information, see What is an HSM? and How On-Premises HSM Signing Works.