> For the complete documentation index, see [llms.txt](https://docs.husher.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.husher.io/documentation/privacy-model/privacy-model/non-custodial-execution.md).

# Non-Custodial Execution

Husher never holds user funds, relying instead on one-time ESP-generated deposit addresses that route directly from input wallet to destination wallet

Husher never holds user funds.

This is not just a privacy feature. It is the foundational architecture that makes Husher's other guarantees possible: because there are no platform-held balances, there is nothing to freeze, redirect, or be compromised.

### How the flow works

{% stepper %}
{% step %}

### Deposit address generated

When you initiate a swap, the selected Exchange Service Provider (ESP) generates a one-time deposit address for your order.
{% endstep %}

{% step %}

### Funds sent from your wallet

You send the input assets from your own wallet to that address. Husher never instructs you to send funds to a Husher-controlled address.
{% endstep %}

{% step %}

### Execution against external liquidity

The ESP executes the swap against centralized-exchange spot liquidity. Husher orchestrates the routing and instructions but does not take custody.
{% endstep %}

{% step %}

### Output delivered to your wallet

The output assets are delivered directly to your specified destination wallet or wallets. At no point do they pass through a Husher-controlled address.
{% endstep %}
{% endstepper %}

{% hint style="success" %}
Because Husher does not custody assets or operate user wallets, it cannot freeze, rehypothecate, or redirect funds.
{% endhint %}

### Why non-custodial architecture matters for privacy

Custody creates records. A platform that holds your funds must track inflows, outflows, and balances per user. Non-custodial execution removes those records from the Husher side entirely: the only on-chain record is the transfer you initiate from your own wallet, and the delivery to your destination.

| Custodial platform                    | Husher (non-custodial)          |
| ------------------------------------- | ------------------------------- |
| Holds user balances internally        | No internal balances            |
| Can freeze or redirect funds          | Cannot freeze or redirect funds |
| Builds deposit and withdrawal history | No platform-held history        |
| Requires accounts to track balances   | No account required to swap     |

### Related pages

{% content-ref url="/pages/7XNA0GxZBbF0J8JpHFpo" %}
[Privacy by Design](/documentation/privacy-model/privacy-model/privacy-by-design.md)
{% endcontent-ref %}

{% content-ref url="/pages/nCukVW8ZpSuvdB8bGo5X" %}
[Shared Responsibility Model](/documentation/privacy-model/privacy-model/shared-responsibility-model.md)
{% endcontent-ref %}