Tokenization means representing rights on a distributed ledger: ownership of an asset, a claim against an issuer, a stake in a project, recorded as transferable digital tokens. The token is not the asset, and it is not the source of the right. It is evidence of the right. Law and contract decide what that right contains.
Tokenization meaning: a new register, not a new asset class
In finance, tokenization moves the record of ownership from paper certificates, spreadsheets or central databases onto a distributed ledger. The underlying asset does not change. A tokenized bond is still a bond. A tokenized share carries the same dividend and voting rights as its book-entry twin. What changes is where entitlements are recorded and how transfers settle.
The register matters because it decides who can enforce a right against the issuer. When the ledger is the legally recognised register, a transfer on the ledger is the transfer. When the ledger only mirrors some other record, the token is a receipt with no legal weight of its own. The first question for any tokenization project is therefore concrete: does this ledger have legal effect, or is it decorative?
What tokenization does not mean
The token evidences the right. It does not create it. If a smart contract mints a token labelled “one share” but no share was ever issued under company law, the holder owns a database entry and nothing more. Rights are born in legal acts: the issuance deed, the bond terms, the shareholders’ agreement. The ledger records what those documents created, and adds a shared, tamper-resistant history of every transfer.
The consequence for issuers is a fixed order of operations: legal structuring first, technology second. Define the instrument, document the rights, then represent them on the ledger. A project that mints tokens first and plans to add the legal layer later has the sequence backwards, and supervisors read it exactly that way.
Data tokenization is a different concept
In payments and IT security, tokenization means replacing sensitive data, such as a card number, with a surrogate value that is useless if intercepted, and that meaning shares nothing with finance beyond the name. This article covers the financial meaning: the representation of negotiable rights on a distributed ledger. If you came here for the data-security meaning, this is the wrong page, and knowing that now saves you ten minutes.
When tokenization meets securities law
If a token carries the rights of a financial instrument, a share, a bond, a fund unit, it is a security token and securities law applies in full: prospectus rules, conduct rules, distribution through authorised firms. MiCA, the EU regulation on markets in crypto-assets, expressly excludes such tokens from its scope, because they already have a rulebook (Regulation (EU) 2023/1114, art. 2.4; EUR-Lex).
The reference list of financial instruments sits in Annex I of MiFID II, and ESMA has published guidelines on when a crypto-asset qualifies as one. The test looks at substance, meaning the rights the token actually carries, not at what a whitepaper calls it (Directive 2014/65/EU; EUR-Lex). Our guide to what a security token is walks through that qualification test step by step.
Spain answered the register question directly. Its 2023 securities-markets law allows financial instruments to be represented on distributed-ledger systems and requires an ERIR, the entity responsible for recording and registering them. Think of the ERIR as the digital notary of the register (Ley 6/2023, art. 8; BOE). Royal Decree 814/2023 develops the figure and its obligations (BOE). The first ERIR, URSUS-3 Capital, A.V., was authorised in November 2024, so the route is operational, not a proposal.
What issuers actually tokenize
| Asset | Typical instrument | Regulatory route in the EU |
|---|---|---|
| Company equity | Shares or equity-linked notes | Securities law: prospectus or an exempt offer, DLT register with an ERIR in Spain |
| Private debt | Bonds and notes | Prospectus Regulation regime or an exemption, MiFID II distribution rules |
| Real estate | An SPV holds the property and issues bonds or shares | Securities law applied to the SPV’s instruments |
| Investment funds | Units or shares of the vehicle | Fund regulation plus securities rules for the units |
In every row the asset stays where it was. What reaches the investor is a security recorded on a ledger. Pick the row that matches your asset and you have named your legal framework. A country-by-country view of the frameworks is in our guide to asset tokenization in Europe.
Where to start
- Classify the rights you want to distribute. If they look like a share, a bond or a fund unit, plan for securities law from day one.
- Choose the issuing vehicle: the operating company itself, or an SPV that isolates the asset and its risks.
- Map the disclosure duty. Depending on size and audience, the raise runs under a prospectus, an exemption or a private placement, and the mechanics of a security token offering follow from that choice.
- Appoint the register. In Spain, an authorised ERIR keeps the legal record of the tokenized instrument.
Each step is a decision you can take this quarter. None of them requires believing anything about technology, only reading what your instrument is.
If the rights you plan to distribute look like a security, the regulated route already exists and it is open. Run the 2-minute issuance assessment or request a proposal.
This content is educational. It is not legal, tax or investment advice. Always check the current version of each rule on BOE and EUR-Lex.
