Tokenized Real-World Asset Platforms for Regulated Markets
Putting Real Assets on a Ledger Without Losing the Legal Wrapper
Tokenisation programmes usually start with the token and work outwards, which is why so many stall at the point where a lawyer asks what the holder actually owns. A token is a record on a ledger. Whether it represents legal title, a beneficial interest, a contractual claim against an issuer, or merely evidence of an entry in a register held elsewhere is a legal question with entirely different engineering consequences.
A tokenized real world assets platform that reaches production is therefore designed from the legal structure inwards. The ledger is the easy part, the register is the important part, and asset servicing is where most of the effort goes.
What is actually being tokenised?
Almost never the asset itself, and the difference determines the architecture.
| Structure | What the token is | Design consequence |
|---|---|---|
| Direct title recorded on ledger | The authoritative record of ownership | Requires legal recognition of the ledger as the register |
| Token as evidence of a register entry | A representation, register is authoritative | Ledger and register must reconcile continuously |
| Token as a claim on an issuer | A contractual right | Issuer credit matters, insolvency analysis required |
| Token representing a fund interest | Units in a collective vehicle | Fund rules, NAV, subscription and redemption mechanics |
| Token as a wrapper over a custodied asset | Interest in an asset held by a custodian | Custody arrangement and segregation are central |
Why does the legal wrapper decide everything?
Because it determines who owns what if the platform fails, and what the holder can enforce.
If the ledger is the authoritative register in law, a transfer on the ledger is a transfer of ownership and the platform is systemically critical to the asset. If the ledger merely mirrors a register held by a transfer agent, then the register governs and the ledger is a convenience that must be reconciled. Both are viable, and the failure mode is building the second while telling investors it is the first. Settle this before designing anything, because the answer changes custody, recovery, dispute resolution, and what happens in insolvency.
In your structure, if the ledger and the register disagree, which one is right?
Talk to Digiqt about tokenisation structure and register design
Which asset classes are realistic?
The illiquid and operationally heavy ones, because that is where the current process is expensive.
| Asset class | Benefit potential | Reason |
|---|---|---|
| Private funds and private credit | High | Manual subscription, transfer, and reporting today |
| Real estate interests | High | Fractionalisation and transfer friction |
| Money market fund units | Moderate to high | Collateral mobility and intraday movement |
| Corporate bonds | Moderate | Already reasonably efficient, gains in issuance and small denominations |
| Listed equities | Low | Existing infrastructure is efficient and cheap |
| Commodities | Variable | Depends entirely on the underlying custody arrangement |
Why do liquid assets gain least?
Because their existing settlement is already fast, cheap, and legally settled.
Tokenising an instrument that already settles reliably through a depositary adds a parallel process with new legal questions and no material efficiency gain. The genuine opportunity is where investors currently wait weeks for a subscription, where transfers require signed paperwork, and where reporting is assembled by hand. Choose the asset class on that basis rather than on which one is easiest to demonstrate, and be honest internally about which programmes are exploration rather than value delivery. That candour is the point of this assessment of blockchain use cases versus marketing hype.
What does the platform need to do?
Nine functions, with the register rather than the token at the centre.
| Function | Responsibility |
|---|---|
| Issuance | Create the instrument, its terms, and its initial allocation |
| Register | Authoritative record of holders, holdings, and entitlements |
| Transfer control | Enforce eligibility, restrictions, lockups, and limits |
| Asset servicing | Income, corporate actions, fees, tax |
| Valuation | Pricing or NAV, at a defined frequency with a source |
| Investor eligibility and onboarding | Suitability, jurisdiction, accreditation, AML |
| Custody | Underlying asset and token or key custody |
| Secondary transfer or market | Matching, settlement, price formation |
| Reporting | Holder statements, regulatory reporting, tax documentation |
Why is the register the core rather than the token?
Because entitlements, not tokens, are what holders are owed.
Income distributions, voting, tax reporting, and redemption all operate on the register of who held what and when. A platform designed around token transfers and lacking a proper register discovers this at the first distribution, when it needs a position as at a record date including transfers in flight. Build the register with as-at querying, full history, and reconciliation to the ledger, and treat the token as a transfer mechanism rather than as the system of record unless the legal structure genuinely makes it so.
How do transfer restrictions work?
Through eligibility rules enforced at transfer, plus off-ledger controls for what the ledger cannot see.
Regulated instruments carry restrictions: eligible investor categories, jurisdictional limits, holding period lockups, maximum holder counts, minimum denominations, and sanctions constraints. Enforce what can be enforced at transfer through whitelisted addresses tied to verified investors, and accept that some conditions depend on facts the ledger does not hold, such as an investor's current accreditation status or a sanctions listing published minutes ago. That means an off-ledger control layer with the authority to block, freeze, or reverse where the rules permit, which brings you back to the correction mechanism question and to sanctions screening at the point of transfer, as covered in this guide to sanctions screening and unpayable claims.
Why are on-ledger controls insufficient alone?
Because eligibility is a fact about the world, not a property of an address.
An address whitelisted last quarter may belong to an investor whose accreditation lapsed, whose jurisdiction changed, or who has since been sanctioned. On-ledger enforcement is fast and deterministic and it can only apply the state it holds, so the platform needs a process that keeps that state current and a mechanism to act between updates. Design the refresh cadence deliberately and monitor the staleness of eligibility data, since that staleness is your actual compliance exposure.
How do you handle asset servicing?
As an off-ledger process reconciled to the ledger, because the underlying asset does not know it has been tokenised.
Income arrives, corporate actions occur, fees accrue, and tax must be withheld, all determined by the underlying asset and its market. The platform must compute entitlements from the register as at the correct date, execute distributions to current holders, handle events the token model cannot represent, and reconcile throughout. The events that break naive designs are the awkward ones: a restructuring that changes the instrument, a partial redemption, a fractional entitlement, a stock distribution where the new instrument is not tokenised. Model an escape hatch for those rather than assuming the token schema covers everything, and note that the entitlement discipline is exactly that of conventional custody, as set out in corporate actions automation.
What happens on your platform when the underlying asset does something the token schema cannot represent?
Talk to Digiqt about asset servicing design for tokenised instruments
Where does custody sit?
In two places, both requiring segregation and insolvency analysis.
Custody of the underlying asset follows conventional arrangements, with the usual questions about segregation, title, and what happens if the custodian fails. Custody of the token, meaning control of the keys that can transfer it, is a distinct problem: whoever holds the keys can move the asset, so key custody is ownership control in practice regardless of what the register says. Use hardware-backed key management, define quorum arrangements for administrative actions, plan for key loss and compromise with recovery arrangements agreed in advance, and analyse whether client tokens are segregated from the platform operator's own in insolvency. The key custody design sits in HSM and key management architecture.
What prudential treatment applies to banks?
A dedicated Basel Framework chapter, with tokenised traditional assets treated as a distinct category.
The Basel Committee published its standard on the prudential treatment of cryptoasset exposures in December 2022, creating a new chapter of the consolidated Basel Framework covering cryptoasset exposures with an implementation deadline of 1 January 2025, and spanning three categories: tokenised traditional assets, stablecoins, and unbacked cryptoassets. The commercial implication for a tokenisation programme is direct: how your instrument classifies affects the capital a bank holder must hold against it, which affects whether banks will buy it. Involve treasury and capital management early, since a structure that looks elegant and classifies unfavourably will struggle to find bank demand. Where the instruments settle on a market infrastructure, the CPMI-IOSCO Principles for financial market infrastructures set the framework for that infrastructure.
How do you handle valuation and NAV?
With a defined source, frequency, and process, particularly for illiquid assets.
Tokenisation makes transfer easy and does not make an illiquid asset liquid or a hard-to-value asset easy to value. Define the valuation source, the frequency, the responsible party, and the process for stale or contested valuations, then publish the basis alongside the number. Two failure modes recur: a token trading at a price disconnected from a quarterly NAV, and a secondary transfer priced off a valuation the parties did not understand. Both are avoidable with disclosure and neither is solved by the ledger. Fractionalisation raises the same question in a different form, since a small holder needs the same valuation clarity as a large one.
What makes a secondary market real?
Eligible buyers, price formation, working transfer processing, and settlement finality.
A token that can technically move is not a market. A market requires a population of eligible buyers who can be onboarded quickly, a mechanism for price discovery, settlement that is final in law, and a transfer process that completes without manual intervention. Many tokenisation projects deliver the technical transfer capability and no market, which produces an instrument that is theoretically transferable and practically as illiquid as before. Decide early whether you are building liquidity or operational efficiency, because they need different investments and the second is more often achievable. Settlement mechanics for the transfer leg are covered in atomic settlement and delivery-versus-payment.
How should delivery be sequenced?
Legal structure, then register, then servicing, then transfer, then market.
| Phase | Duration | Deliverable |
|---|---|---|
| Legal structure and register authority | 3 to 5 months | What the token is, which record governs, insolvency analysis |
| Register and as-at entitlement engine | 3 to 4 months | Holders, history, as-at queries, ledger reconciliation |
| Investor onboarding and eligibility | 2 to 3 months | Verification, accreditation state, refresh cadence |
| Asset servicing | 3 to 5 months | Distributions, corporate actions, tax, escape hatch for exceptions |
| Transfer control | 2 to 3 months | On-ledger enforcement plus off-ledger controls and freeze capability |
| Custody and key management | 2 to 3 months | Asset and token custody, quorum, recovery, segregation |
| Secondary transfer capability | 3 to 4 months | Matching, settlement, price basis, reporting |
Asset servicing before transfer capability is deliberate. A platform that can transfer tokens and cannot pay a distribution correctly has automated the easy half and left the part investors actually care about manual. Multi-party governance of the platform itself needs settling early too, as discussed in multi-party data sharing and consortium models, and the transparency benefits that genuinely accrue are the kind described in blockchain for process transparency.
Which metrics matter?
Register and ledger reconciliation breaks, servicing accuracy, eligibility data staleness, transfer failure rate, and onboarding time.
Report reconciliation breaks between register and ledger with ageing, since any break means somebody's holding is ambiguous. Track servicing accuracy, meaning distributions and corporate actions executed correctly and on time. Measure eligibility data staleness, which is your compliance exposure between refreshes. Report transfer failure rate by cause, distinguishing eligibility blocks, which are the control working, from technical failures. Measure investor onboarding time, because that determines whether a secondary market can function. And track manual interventions per servicing event, since that is the operational efficiency the programme was meant to deliver.
Tokenisation delivers real value in places where the current process is manual and slow, and delivers very little where existing infrastructure already works. The programmes that succeed settle the legal question first, build a proper register rather than relying on the token, and treat asset servicing as the main engineering effort rather than an afterthought.
Frequently Asked Questions
Is the token the asset?
Rarely. In most structures the token evidences a claim or an interest, with the asset held under a legal arrangement. What the token legally is determines everything else in the design.
Which asset classes benefit most from tokenisation?
Illiquid and operationally heavy ones such as private funds, private credit, and real estate, where the current process is manual. Liquid instruments already settle efficiently.
What is the core of the platform?
The register of holders and entitlements. The token is a representation, and if the ledger and the legal register can disagree, the register is what matters.
How are transfer restrictions enforced?
Through whitelisting and eligibility rules applied at transfer, combined with off-ledger controls, since on-ledger checks cannot verify facts that live outside the ledger.
What breaks when the underlying asset does something unusual?
Asset servicing. Corporate actions, restructurings, and fee events frequently cannot be represented in the token model, so an off-ledger process must handle them and reconcile.
Where does custody sit?
In two places: custody of the underlying asset and custody of the token and its keys. Both need segregation, insolvency analysis, and key management arrangements.
What prudential treatment applies to banks?
The Basel Committee's cryptoasset standard creates a chapter covering tokenised traditional assets, stablecoins, and unbacked cryptoassets, with implementation from January 2025.
What makes a secondary market real rather than theoretical?
Eligible buyers, price formation, settlement finality, and a transfer agent process that works. A token that can technically move is not a market.
