There are actually several non-profits holding Debian assets, in years with a physical DebConf usually a new or existing organisation is enlisted to hold funds for that conference.

https://wiki.debian.org/Teams/Treasurer/Organizations https://wiki.debian.org/Teams/DPL/TrustedOrganizationCriteri...