The time needed to issue a security token varies because different things are measured: the technical part can be resolved in weeks, while the legal and registration part sets the real calendar. What lengthens the process most is the incorporation or adaptation of the vehicle, the issuance documentation and, where applicable, the prospectus before the CNMV.
You decide to tokenize an asset and the committee's first question is always the same: when can we issue. You ask for timelines and receive answers that don't add up. A technical provider promises you “two weeks.” A law firm tells you “almost a year.” Both can be right, because they are measuring different things. You need to know which phase rules the clock before committing to a date with your investors.
How long does it take to issue a security token in Spain
Count in months, not weeks. The smart contract is developed quickly. What lengthens the calendar are the legal pieces: the token classification, the issuer vehicle, the issuance document, the engagement of the ERIR and, if you target retail investors, the prospectus before the CNMV. Technology is almost never the bottleneck. The regulatory dossier is.
The ERIR (the entity responsible for registration and recording) is the system's digital notary: it is responsible for the integrity and immutability of the entries (art. 8 Ley 6/2023, LMVSI). As of October 2026, the CNMV registry includes one designated entity, Ursus-3 Capital (the first ERIR), which turns its schedule into a structural brake on the market.
What it means for you: if your plan assumes that “the contract is ready, we're already issuing,” you're going to miss the date. Measure the project by the slowest legal phase, not by the speed of the development team.
The real phases, in order
Issuing is not a single procedure. It is seven linked phases, and some advance in parallel. The weight of each one on the calendar varies depending on your asset and your audience.
| Stage | What you resolve | Weight on the timeline |
|---|---|---|
| 1. Legal classification of the token | You confirm whether your token is a transferable security (it falls outside MiCA) | Medium |
| 2. Design of the issuer vehicle | You incorporate an SA or SPV; you convert the SL if necessary | Medium-high |
| 3. Issuance document + engagement of the ERIR | You draft the document and reserve a slot at the ERIR (in parallel) | High |
| 4. Offering regime | You choose between a CNMV prospectus and an exemption | Very high if there is a prospectus |
| 5. Development and audit of the smart contract | You program and audit the contract | Low-medium |
| 6. Cross-cutting compliance | You implement KYC/AML and data protection | Medium, in parallel |
| 7. Issuance and distribution | You record, issue and place | Low |
Legal qualification of the token
First of all, you define what your token is. If it represents a share, a profit participation or a debt right, it is a transferable security. It then falls outside MiCA and comes under the securities markets regime (art. 2.4 Regulation (EU) 2023/1114). This phase is short when the asset is clean from the outset. It drags on forever when rights have to be restructured or the nature of the underlying asset must be clarified.
What it means for you: resolve the legal qualification first. It conditions all the following phases, including whether you need a prospectus.
The issuer vehicle
An S.L. cannot issue tokenized transferable securities. The law prohibits representing its shares as a transferable security (art. 92.2 Ley de Sociedades de Capital). If your project operates through an S.L., you will have to convert it into an S.A. or create an SPV to issue. Incorporating or converting a company takes time: notary, registry and corporate resolutions.
What it means for you: if you start from an S.L., add the conversion timeline to the schedule from day one. Do not discover it halfway through the project.
Issuance document and the ERIR, in parallel
The issuance document sets out the characteristics of the security and the registry rules (art. 7 LMVSI). You draft it while you engage the ERIR, because the ERIR is involved in how the issuance is recorded (art. 8 LMVSI; RD 814/2023). These two pieces move forward at the same time, but the ERIR sets the pace: its file and its schedule depend on a single authorized provider.
What it means for you: engage the ERIR early, before touching code. If you wait until the contract is ready, you will hit its waiting list.
The offering regime determines almost everything
Here the schedule splits in two. If you rely on a prospectus exemption, you move quickly, although you remain subject to MiFID II conduct obligations (art. 1.4 Regulation (EU) 2017/1129). If you have to publish a prospectus and have it approved by the CNMV, you add a review process that lengthens the project significantly.
What it means for you: before promising a date, decide whether you will go the prospectus route. It is the variable that moves the total timeline the most.
Smart contract: the part you think takes time but doesn't
Programming and auditing the contract is scoped work. An experienced team delivers and audits it without blocking the schedule, provided the issuance document already defines the rules. The contract implements what the legal document says, not the other way around.
What it means for you: do not start programming before closing the qualification and the issuance document. Reprogramming due to a legal change costs more than waiting.
What really lengthens the timeline
Three factors turn “a few months” into “many more months”. You should detect them before setting dates.
- Targeting retail investors. You trigger the prospectus obligation and the MiFID II and LMVSI conduct and marketing obligations. More documentation, more review, more timeline.
- An asset poorly structured from the outset. If the rights to the underlying asset are unclear, the legal qualification gets stuck and drags everything else down.
- An S.L. that has to be converted. You add the entire corporate process before you can issue (art. 92.2 LSC).
What it means for you: if the three factors coincide, do not negotiate tight dates. Clean up the asset, define the vehicle and clarify the target audience before talking about deadlines.
The myth of 1 July 2026
Someone on your team may have heard that there is a "MiCA deadline" in July 2026. If you issue a security token, that deadline is not yours. Transferable securities are outside MiCA (art. 2.4 Regulation (EU) 2023/1114). The July transitional regime affects crypto-asset service providers (CASP), not your securities issuance.
What it means for you: do not compress your schedule to "reach July". That date does not apply to your issuance. Plan according to your real phases, not according to a headline that is not about you.
What to do now
To set a defensible date, organize the work as follows. First resolve the legal classification and the vehicle, because they condition everything else. Then engage the ERIR, without waiting for development. In parallel, decide whether you will go with a prospectus or an exemption: that choice determines most of the timeline.
If you want the full step-by-step journey, review the guide on how to issue a security token in Spain. To understand why the ERIR governs the timeline, read what an ERIR is. If you are still deciding whether to tokenize your asset, start with the guide to asset tokenization for companies. And when you come across a term, check the glossary.
What it means for you: with the classification, the vehicle, and the ERIR on track, you can give a date that will hold up before the committee. Without them, any number is a wish.
Frequently asked questions
How long does it take to issue a security token in Spain?
It is measured in months, not weeks. The timeline depends on the slowest legal phase: engaging the ERIR and, if there is a prospectus, its approval by the CNMV. Smart contract development is usually not the bottleneck.
Which phase takes the longest?
The ERIR file and the prospectus publication, where applicable. With the supply of ERIRs still highly concentrated (Ursus-3 Capital was the first, in November 2024), their schedule conditions the timeline (art. 8 LMVSI).
Can I speed things up by issuing from an S.L.?
No. An S.L. cannot represent its shares as transferable securities (art. 92.2 LSC). You will have to convert it into an S.A. or use an SPV, which adds time rather than removing it.
Does the prospectus always lengthen the project?
The prospectus adds a review process before the CNMV that significantly lengthens the timeline. If you rely on an exemption, you move faster, although you remain subject to the MiFID II conduct obligations (art. 1.4 Regulation (EU) 2017/1129).
Is the MiCA deadline of 1 July 2026 my deadline?
No, if you issue a security token. Transferable securities are outside MiCA (art. 2.4 Regulation (EU) 2023/1114). That transitional regime affects crypto-asset service providers, not your issuance.
When should I engage the ERIR?
Early, before starting technical development. Their waiting list and their file set the pace of the project, so booking a slot early saves you dead weeks at the end.
Notice
Informational content. It does not constitute legal, tax or investment advice. HokenFi is a software and infrastructure provider; it does not provide regulated services. Verify the current version of the cited rules in BOE and EUR-Lex.
Cited regulations
- Ley 6/2023, de 17 de marzo, de los Mercados de Valores y de los Servicios de Inversión (LMVSI), arts. 7 and 8 - BOE-A-2023-7053.
- Real Decreto Legislativo 1/2010, Ley de Sociedades de Capital (LSC), art. 92.2 - BOE-A-2010-10544.
- Real Decreto 814/2023, implementing the LMVSI - BOE-A-2023-22764.
- Regulation (EU) 2023/1114 (MiCA), art. 2.4 - CELEX 32023R1114.
- Regulation (EU) 2017/1129 (Prospectuses), art. 1.4 - CELEX 32017R1129.
- Directive 2014/65/EU (MiFID II) - CELEX 32014L0065.
- CNMV Circular 1/2024 - BOE-A-2024-27149, which repeals Circular 1/2022 on crypto-asset advertising as of 28 December 2024.
- Ley 10/2010, de prevención del blanqueo de capitales (KYC/AML) - BOE-A-2010-6737; and Regulation (EU) 2016/679 (GDPR).
