Texas Bullion Depository Audit and Verification Process
Affiliate disclosure: we may earn a commission when a reader opens an account through links on this page. The commission has no effect on what you pay or on what we publish. We are not a financial or tax advisor; consult a licensed advisor for your situation. Last reviewed August 2026.
Quick answer
The Texas Bullion Depository uses a three-layer audit process published on its State Admin Oversight page. Lone Star Tangible Assets manages the vault, runs internal audits, and transmits reports daily to the Depository Administrator. The Administrator, appointed by the Texas Comptroller of Public Accounts, has the right to audit at any time. A Texas-based third-party CPA firm audits the depository on a regular basis and reports to the Comptroller.
Short on time? The essentials
- The Texas Bullion Depository is a state agency of the Texas Comptroller of Public Accounts, the only state-administered precious metals depository in the United States, per texasbulliondepository.gov State Admin Oversight, checked August 2026.
- Layer 1 (operator): Lone Star Tangible Assets manages the vault and runs internal audits, with reports transmitted DAILY to the Depository Administrator.
- Layer 2 (state): the Depository Administrator plus the Comptroller's internal audit team can audit any account and any asset at any time, and do so on a regular schedule.
- Layer 3 (independent): a Texas-based third-party CPA firm audits the depository on a regular basis and submits reports to the Comptroller.
- Account holders get a fourth verification path: an online portal with photographic uploads of every deposit and withdrawal, 256-bit encryption in transit and at rest, and automated account event notifications.
- Governance is anchored by House Bill 483, signed by Governor Greg Abbott on June 12, 2015, which placed the depository under the Texas Comptroller and set the audit and oversight framework.
On this page
The audit framework in plain terms
The Texas Bullion Depository publishes its audit approach on the State Admin Oversight page at texasbulliondepository.gov. That page lays out three distinct audit layers that operate in parallel: an operator layer, a state layer, and an independent layer. Each layer has a different auditor, a different scope, and a different reporting line.
The reason there are three layers is the depository's unique legal status. It is a state agency of the Texas Comptroller of Public Accounts, but a private company runs the day-to-day vault. The three-layer approach lets Texas hold both sides accountable: the operator to the state, and the state agency to the public through independent CPA audits.
That structure is different from a private storage vault, where audit oversight is usually limited to an occasional accounting review commissioned by the vault operator. The Texas program calls that "an accounting audit from time-to-time" on its own oversight page, and contrasts it with its own layered approach.
Layer 1: operator internal audit by Lone Star Tangible Assets
The Texas Bullion Depository is operated by Lone Star Tangible Assets LP (LSTA), a Texas-based holding company contracted by the Comptroller. The State Admin Oversight page says plainly that "the depository is managed and internally audited by Lone Star Tangible Assets, reports are provided daily to the Depository Administrator". That daily reporting cadence is the tightest of the three layers.
Because LSTA is the party that physically receives, inspects, weighs, catalogs, and stores every bar and coin, its internal audit function is the first line of defense against reconciliation errors. The operator's internal audit knows the vault layout, the serial numbers, and the daily transaction volume in a way an outside auditor never can on a walk-in basis.
The daily cadence to the Administrator is the meaningful part. It means the state agency responsible for the depository sees fresh operator-side audit output every business day, not once a quarter or once a year. If a discrepancy appeared at end of business Monday, the Administrator would see it Tuesday morning, per the state's own description of the reporting flow.
Layer 2: state audit by the Depository Administrator and the Comptroller
The Depository Administrator is a Texas Comptroller appointment. As of August 2026 the Administrator is Macy Douglas, per the depository's Depository Administrator page. Douglas is described on that page as a 20-plus-year veteran of the Comptroller's office, currently serving as the agency's director of Treasury Operations, an office that handles more than $550 million in state deposits each day.
The State Admin Oversight page says the Administrator and "internal audit team of the Texas Comptroller of Public Accounts maintains the ability to audit the depository at any time and regularly conduct audits of the assets held in the depository". Two things matter in that sentence. First, the audit right is any time, not scheduled only. Second, actual audits of the assets themselves happen on a regular basis.
The Comptroller's FAQ answer on auditing (question 9) is even more direct: the Administrator "has direct oversight and audit privileges regarding all Depository Account Holder accounts". Every account is auditable, not just the depository as a whole. For an IRA depositor, that is the sentence to keep in mind: the state's appointee can pull any one account's records.
The state layer also has a public contact channel. The Office of the Depository Administrator publishes a phone line at +1 (512) 463-4433, a Compliance Manager line at +1 (512) 463-3875, and an email at depository.administrator@cpa.texas.gov. Those routes exist because the state audit function is not meant to be invisible.
Layer 3: independent audit by a Texas-based accounting firm
Layer three is the outside CPA layer. The State Admin Oversight page states that the depository "is audited by a third party accounting firm on a regular basis". The FAQ adds that the depository "is audited by a well-known Texas-based accounting firm, and it submits those reports to the Comptroller for review according to a regular schedule".
Two design choices in that layer are worth flagging. First, the firm is Texas-based, so the auditor sits under Texas Board of Public Accountancy jurisdiction. Second, the reports go to the Comptroller for review, not to LSTA. That routing keeps the operator from being the client of the auditor who audits it, which is the classic conflict a public program has to avoid.
The depository does not publish the name of the third-party firm on the public pages we reviewed in August 2026. That is not unusual for a state contract auditor: the identity is typically documented in the state contract file rather than on the depository's marketing site. A prospective depositor who wants the firm name can request it through the Depository Administrator's office.
The account holder layer: photographic records and portal access
Outside the three formal audit layers, every depositor has a self-service verification path built into the platform. The First in Class page describes it plainly: technology at the depository includes "photographic verification uploads of all deposits and withdrawals to and from depositor accounts" and "automated notifications of account events".
The portal itself is at texasbulliondepository.gov behind a Sign In link. Once logged in, holdings appear in troy ounces and grams, and the current market value updates live on screen, per the Depository Account Holders page. That means the value you see is not a stale monthly snapshot, it reflects the market at the moment you open the page.
All account information is protected by at least 256-bit encryption in transit and at rest, and personally identifiable information is never stored unencrypted, per the First in Class page. That encryption baseline matters because the portal record is the account holder's own audit-of-record between formal audit cycles.
Physical security auditors also verify: police, video, and vault design
An audit chain that only checks the books would be incomplete. The physical layer is verified too. The First in Class page states that the depository is "safeguarded by State Police Officers from the Texas Comptroller's Criminal Investigation Division" and that "Lone Star Tangible Assets maintains its own armed security team at the facility".
The vaulting design is Class III segregated, and all operations are conducted under 24-hour video surveillance, per the same page. Segregated Class III vaulting matters for audit purposes because it means the exact bars and coins deposited under a given account are the ones stored, not a mixed pool. That is a much easier posture for an auditor to reconcile than commingled storage.
The Texas Comptroller's Criminal Investigation Division presence adds a state-employed law-enforcement layer on top of the operator's own guards. Any physical audit walkthrough by the Administrator or a CPA firm therefore takes place inside a state-secured perimeter, not a private-only one. That is another design difference from a purely private vault.
The governance base: HB 483 and the Texas Government Code
| Layer | Auditor | Cadence | Reports to |
|---|---|---|---|
| 1 Operator internal audit | Lone Star Tangible Assets (depository operator) | Daily reports | Depository Administrator |
| 2 State audit | Depository Administrator + Comptroller internal audit team | At any time; regular audits of assets | Texas Comptroller of Public Accounts |
| 3 Independent audit | Texas-based third-party accounting firm | Regular basis | Texas Comptroller of Public Accounts |
| Account holder verification | The account holder via the depositor portal | Any time; on every deposit and withdrawal | Self-service (portal), plus custodian for IRA metal |
The audit chain has a legal starting point. House Bill 483 was signed by Governor Greg Abbott on June 12, 2015, and filed by Representative Giovanni Capriglione. It created the first state-administered precious-metals bullion depository in the United States and placed the program under the Texas Comptroller of Public Accounts. Operations began on April 1, 2018 in Leander, Texas.
The State Admin Oversight page frames the effect of that legislation directly: it "ensures governance and accountability are always at the forefront of depository operations, features that don't exist at other private depositories". The three-layer audit process is the operational expression of the statute. Without HB 483, there would be no Comptroller-appointed Administrator and no state audit team with any-time audit rights.
The current Texas Comptroller of Public Accounts is Don Huffines, per the depository site header and the Texas Comptroller agency page. Both the Administrator and the accounting firm auditor report into the Comptroller's office, so the elected head of that office sits at the top of the audit chain.
How the process compares to a private depository audit
Private depositories are not audit-free. Most reputable IRA depositories in the United States commission periodic accounting audits and hold insurance policies that require inventory verification. What they typically do not have is a state agency appointee with any-time audit privileges over every individual account. That is the specific gap the Texas program was designed to fill.
The Texas program says as much on its own oversight page: private depositories are usually "managed by the private depository management team with no oversight other than an accounting audit from time-to-time". The Texas Bullion Depository is state-owned and state-audited on top of the CPA audit, which is a structural difference, not a marketing claim.
Neither model is inherently wrong for IRA storage; both can hold IRS-approved metal for a self-directed IRA. The Texas structure adds a governmental accountability layer that many depositors value, particularly Texas residents who prefer their metal audited by a Texas state agency under Texas law. That preference is a legitimate reason to choose the Texas Bullion Depository over a private option; it is not a criticism of any private depository.
Worked example: what an audit chain does for a $200,000 IRA
How to read the audit chain as a prospective depositor
The most useful thing a prospective depositor can do with the audit chain is read what the depository publishes about it in the depositor's own words, not marketing summaries. The pages that carry the primary text are the State Admin Oversight page, the FAQ page (question 9 in particular), the First in Class page, and the Depository Administrator page. All four are linked from the depository's main navigation and were reachable in August 2026.
Once inside the portal, the account holder's job is smaller but ongoing. Match each deposit's photographic record and lot identifier to the dealer invoice. Confirm the running balance against the IRA custodian statement item by item. Check that automated event notifications match the transactions you expect. Those steps take minutes per month and are the depositor's own audit routine on top of the three institutional layers.
A prospective depositor who wants the outside CPA firm's identity, or a copy of a recent audit report, can request that information through the Office of the Depository Administrator. Reports submitted to the Texas Comptroller for review may be subject to public information rules under Texas law, though a request may need to be filed formally to receive them.
Limits and honest caveats of the published process
- Report frequencies are stated qualitatively. The public pages describe operator internal audit reports as "daily" and third-party CPA audits as "on a regular basis", but do not publish a fixed calendar for the third-party audit cycle. Ask the Administrator's office if you need the current schedule.
- The third-party CPA firm name is not on the public marketing pages. This does not indicate a hidden auditor; state contract vendor details are typically documented in the state contract file. Request the name through the Depository Administrator if it is material to your decision.
- Audit reports are not published as PDFs on the depository site. The State Admin Oversight and FAQ pages describe the audits without linking to specific reports. Report copies would need to be requested formally under Texas public information procedures.
- Any-time audit rights are on paper. The rights are strong on the FAQ and oversight pages. Their real value depends on how often the state actually exercises them, which is a follow-up question a diligent depositor can ask.
- The audit chain is not the same as insurance. Assets are insured through Lloyd's of London to metal content value once inspected and accepted, per the depository's Insurance page. An audit confirms metal is present; insurance covers loss if it is not. Both matter for a full risk view.
None of these caveats undermine the process. They are the honest boundaries of what public documentation currently shows. A prospective depositor who wants deeper detail can get it through the Administrator's office; the depository publishes the contact routes for exactly that purpose.
Frequently asked questions
Frequently asked questions
Who audits the Texas Bullion Depository?
Three parties, per the depository's FAQ and State Admin Oversight page. Lone Star Tangible Assets, the operator, runs internal audits and reports daily to the Depository Administrator. The Administrator and the Comptroller's audit team can audit at any time. A Texas-based third-party accounting firm audits the depository on a regular basis and submits reports to the Comptroller. The State of Texas also subjects the depository to state agency audits.
How often is the Texas Bullion Depository audited?
Cadences differ by layer. Operator internal audit reports flow to the Depository Administrator daily, per the State Admin Oversight page. The Depository Administrator and the Comptroller's internal audit team can audit at any time, and regularly conduct audits of the assets held. The independent Texas-based CPA firm audits the depository on a regular basis and reports to the Comptroller. A fixed calendar for the CPA audit is not published on the public pages we reviewed in August 2026.
Who is the Depository Administrator, and what is the office's role?
The current Depository Administrator is Macy Douglas, a 20-plus-year veteran of the Texas Comptroller's office and the agency's director of Treasury Operations, per the Depository Administrator page. The office has direct oversight and audit privileges regarding all Depository Account Holder accounts, per the FAQ. Reach the office at +1 (512) 463-4433, the Compliance Manager at +1 (512) 463-3875, or depository.administrator@cpa.texas.gov.
Is the third-party accounting firm named publicly?
The public pages describe the firm as a "well-known Texas-based accounting firm" but do not name it in the material we reviewed in August 2026. That is not unusual for a state contract auditor: firm identity is typically in the state contract file rather than on the depository's site. A depositor who wants the current firm name can request it through the Office of the Depository Administrator.
Can I request a copy of an audit report?
The depository does not publish CPA audit reports as PDFs on its site. Reports go to the Texas Comptroller for review. As reports held by a state agency, they may be subject to Texas Public Information Act procedures, so a formal request through the Office of the Depository Administrator is the practical route. Contact information is on the Depository Administrator page.
How does audit oversight here compare to a private depository?
Private depositories typically undergo periodic accounting audits commissioned by the vault operator and carry insurance-driven inventory verification. The Texas Bullion Depository adds a state agency appointee (the Depository Administrator) with any-time audit privileges over every account, plus a Comptroller-directed CPA audit routed to the state rather than the operator. That is a governance layer private depositories generally do not have. Both models can hold IRS-approved IRA metal.
Does the audit chain cover my exact bars and coins, not just totals?
Yes. Storage is segregated Class III, per the First in Class page. That means the specific items deposited under an account are the ones held and returned. Because the vault is not commingled, an auditor can reconcile item by item, and the depositor can match serialized bars or sealed lot identifiers against the deposit records inside the portal.
Is my metal insured on top of the audit chain?
Yes. Assets are automatically covered for metal content value through the Lloyd's of London insurance marketplace once deposits are received, inspected, and accepted, per the Insurance page. For numismatic coins with a premium above melt value, declare a higher value at deposit so the coverage matches the item worth, not just the metal weight. The audit chain confirms metal is present; insurance covers loss if it is not.
What legal authority sits behind the audit process?
House Bill 483, signed by then-Governor Greg Abbott on June 12, 2015 and filed by Representative Giovanni Capriglione, created the depository as a state agency of the Texas Comptroller of Public Accounts. The Comptroller's oversight duties and the Administrator's role flow from that statute and from the Texas Government Code. The audit and reporting design published on the State Admin Oversight page is the operational expression of that legal framework.
Sources
- Texas Bullion Depository. State of Texas oversight ensures client asset safety and security. State of Texas Comptroller of Public Accounts. Checked August 2026.
- Texas Bullion Depository. Frequently Asked Questions. Checked August 2026.
- Texas Bullion Depository. The First Precious Metals Depository with State Oversight. Checked August 2026.
- Texas Bullion Depository. Depository Administrator, Macy Douglas. Checked August 2026.
- Texas Bullion Depository. Depository Operator, Lone Star Tangible Assets. Checked August 2026.
- Texas Bullion Depository. Depository Insurance. Checked August 2026.
- Texas Bullion Depository. Depository Account Holders. Checked August 2026.
- Texas Legislature Online. House Bill 483, 84th Legislature, Regular Session (2015). Checked August 2026.
- Internal Revenue Service. Approved Nonbank Trustees and Custodians. Checked August 2026.