Unless I’m understanding it wrong you would want a 2 of 3 multisig. You have 2 keys and the entity has 1.

- you can move the funds with 2 keys

- if you lose one let you can work with the entity to move to another 2 of 3 so while there is risk there, there is also a safe guard

- entity cannot move funds without you.

- I think Casa does this.