Founder Office Hours with Gene Deyev: live on Zoom, Mondays 1 PM ET and Thursdays 2 PM ET. Ask him anything.Ask the founder, live.
Save a seatClosest matches
Nothing matched. Browse by subject in the blog, by industry in the case studies, or by term in the glossary.
Investors
Set up the legal entity, governance approvals, and licensing that let your company issue security tokens compliantly.
Phase 5 of 8 · By Gene Deyev, Founder and CEO of Stobox
You choose a legally registered issuing entity (often an SPV), align its governance and corporate documents with the token issuance through board and shareholder resolutions, and confirm which licenses or regulatory approvals its business model and token type require.
01
The issuing company is the legal foundation behind the offering. It determines the regulatory environment, tax obligations, and compliance requirements that apply, and it is what connects the tokenized asset to the real world. A clearly defined, reputable entity builds investor trust, establishes legal ownership of the underlying asset, and provides the framework for enforcing investor rights, transparent operations, and future scalability. Getting this decision right is critical for legal clarity, investor confidence, and long-term success.
The first decision is whether the offering will run through an existing entity or a new, purpose-built one. If you tokenize directly through your parent or holding company, its existing registration, governance, and balance sheet carry the offering, and you can skip the vehicle-selection questions below. If you instead isolate the asset in a dedicated entity, work through the vehicle and jurisdiction choices that follow. For a company issuing tokens against its own shares, the how-to-tokenize-company-equity guide walks through the equity-specific steps in detail.
Note: If you are using your parent company for the tokenization project, you can skip the investment-vehicle selection and move directly to aligning that company’s governance with the issuance.
When a dedicated entity is preferable – to ring-fence a single asset, isolate liability, or optimize for a target investor base – the common structures are:
The right choice depends on tax efficiency, the regulatory environment, investor accessibility, and how many assets you intend to bring to market. See the SPV tokenization guide for how these vehicles map to a token structure.
Jurisdiction shapes setup speed, banking access, tax treatment, and which investors you can reach. Common starting points include:
| Jurisdiction | Best suited for |
|---|---|
| British Virgin Islands (BVI) | Fast, straightforward international setups where local banking is not required |
| Gibraltar | Fund structures |
| Cyprus | EU-focused small and medium-sized businesses |
| USA | US companies and issuers wanting a familiar, quick setup |
| Liechtenstein | Larger projects targeting the EU market |
| Switzerland | Larger projects targeting the EU market |
| Other | Bespoke situations where jurisdiction-specific counsel is required |
These are orientation points, not recommendations – the optimal jurisdiction depends on your asset, investor base, and tax position. Review the relevant jurisdiction guides and confirm with counsel before incorporating.
Within the chosen jurisdiction, the entity’s legal form determines its governance, liability profile, and how it can raise capital. Depending on jurisdiction, the available entity types typically include:
Selecting the right entity type and jurisdiction together lays the foundation for legal clarity and regulatory alignment for everything that follows.
02
Once the entity is chosen, the token issuance has to be integrated into that company’s governance and legal processes. This has two parts: verifying that the entity is real and properly constituted, and formally attaching the token to it so the token carries enforceable rights.
Verification establishes the legal existence, ownership, and credibility of the company offering the tokens. It confirms official registration details, corporate structure, and authorized representatives – building trust, preventing fraud, and satisfying the compliance checks that regulators and investors expect. Documents that typically serve as issuing-company verification include:
Eligibility and control can be represented on-chain through the Stobox DID registry, so verified status is provable without Stobox ever storing the underlying identity documents.
Attaching the token means legally and technically linking it to the company so the token represents real rights – equity, debt, or revenue share – within the entity’s legal structure. The token is issued from a recognized legal entity (an SPV or operating company), which is what makes the investor’s claim enforceable and tied to actual value. To formally establish that link, the issuer generally prepares:
On the technical side, the token itself is issued and managed through Stobox Compass, which enforces these rights and transfer rules at the protocol layer via STV3 – Stobox’s programmable security-token architecture – alongside the open ERC-7943 (uRWA) standard that Stobox backs for compliant issuance. Stobox’s own STBX security token is a live example of equity issued and governed this way. Because Compass is non-custodial, the issuing entity retains control of its own keys while the legal and on-chain records stay aligned. Issuers that want to run compliant issuance under their own brand can also deploy this stack as white-label tokenization infrastructure.
03
The final piece of the framework is confirming whether the issuer needs a regulatory license and, if so, recording it. Specifying the license the issuer holds establishes regulatory compliance, defines the scope of permissible activities, and streamlines due diligence. The selected license type also sets the issuer’s regulatory obligations, reporting standards, and operational limitations.
Just as important is assessing whether a license is required at all for the issuer’s business model and token type. Operating a regulated activity without the appropriate authorization can carry serious civil and, in some jurisdictions, criminal liability, so this assessment should be undertaken diligently and confirmed with qualified securities counsel.
Note: If the issuer is not a licensed business and its model does not require authorization, the licensing details below can be skipped – but document the reasoning behind that conclusion.
Where a license applies, the issuer selects the relevant one(s) from the categories below. Most tokenization issuers will need none of these, or only one; the list is a reference for identifying whether a regulated activity is in scope.
Where a license applies, two details complete the record. The license number is captured so the specific authorization can be identified and cross-checked against the issuing regulator’s public register. A copy of the license is retained alongside the issuing company’s verification documents, so the authorization can be produced during counterparty and investor due diligence. Together these tie the stated license to a verifiable source and keep the compliance file complete.
04
You now have a legally constituted issuing entity, the governance approvals that attach the token to it, and a clear read on your licensing obligations. That framework is the foundation for Phase 6: Prepare Legal Documentation, where the offering documents, subscription terms, and disclosures are drafted to match the entity and structure you have just defined.
Related reading
From the Stobox Tokenization Framework by Gene Deyev. Last updated July 18, 2026. Educational reference, not legal or tax advice – confirm specifics with qualified counsel.
← Back to the frameworkTwo ways in
Twenty-five questions across seven dimensions, about eight minutes, and nobody calls you unless you ask.
Prefer email? info@stobox.io.
Or bring the asset itself – thirty minutes, and we will say if the answer is no.
Stobox Technologies Inc. These are the author’s pages, not legal, tax or investment advice, and not an offer to sell or a solicitation to buy any security. See the privacy summary.
