A tokenised issuance is the most documented event in a company's life and the least retained. The white paper exists in versions, the marketing was written against one of them, eligibility was established per investor and per member state, the register was entered once and must stay true for as long as the security exists. Exedra Gate is the layer where those facts are produced as evidence while the work happens, beside the licensed registrar, venue or custodian that does the rest.
A reviewer can confirm, with free standard tools, that the documents are unchanged and existed at the stated moment. The timestamp comes from an independent authority.
The first question about any token is which law governs it, and the answer decides everything after it. A token that qualifies as a financial instrument is a security and sits outside the crypto-asset regulation entirely; everything else sits inside it. Each entry below is a published rule with its primary source attached. Which side of the fork a given token falls on is a question for counsel, never for a platform.
Showing rules for European Union
The argument on this page does not change with the selection. The citations do.
Every jurisdiction is shown below, grouped and labelled.
Securities are out of MiCA. The Markets in Crypto-Assets Regulation excludes crypto-assets that qualify as financial instruments under MiFID II, so a tokenised share, bond or fund unit is governed by securities law, not by the crypto-asset regime.
The white paper is notified before it is published, and nobody approves it. For crypto-assets inside the regime, the offeror notifies the home competent authority at least twenty working days before publication, with an explanation of why the asset is not excluded and not an asset-referenced or e-money token, and a list of the member states concerned. The same article forbids the authorities to require prior approval of the white paper, or of the marketing beside it, before publication. No supervisor reads it first. Responsibility for what it says, and for proving which version said it, stays with the offeror.
What is published must be what was notified. The published white paper must be identical to the notified version, on a publicly accessible website, before the offer starts, and it stays available for as long as the crypto-assets are held by the public.
Every version survives. A modified white paper is notified seven working days ahead with reasons; versions carry time stamps, the most recent is marked as current, and superseded versions remain publicly accessible for at least ten years, marked as no longer valid.
Marketing is bound to the document. Marketing communications must be identifiable as such, fair, clear, not misleading, consistent with the white paper, and nothing may be disseminated before the white paper is published. Advertisements for a prospectus offer carry the same consistency duty.
The firms around the issuance keep their own records. Investment firms, which is what the issuer’s venue or placement agent will be, keep records of all services, activities and transactions, including relevant electronic communications, for five years, extendable to seven on request.
The register must stay true for the life of the security. Under the German Electronic Securities Act a crypto securities register runs on a tamper-proof system with chronological, deletion-resistant logging; the issuer ensures the integrity and authenticity of the securities for the entire period of registration; and where no registrar is designated, the issuer itself is the registrar, an activity supervised by the federal supervisory authority.
The holder must be able to check the ledger alone. A ledger-based security exists only under a registration agreement, with integrity protected by technical and organisational measures, and with creditors able to verify the entries concerning them without third-party intervention. Multilateral trading of such securities is a licensed facility in its own right.
The retention duty has two edges, a floor and a ceiling. A relevant person must keep the customer due diligence documents and the transaction records for five years from the end of the business relationship, and must not keep them beyond ten years.
The test is whether the transaction can be put back together. The transaction records must be sufficient, on their own, to let the transaction be reconstructed later.
The rule defines what a copy has to be good enough for. Where the rules allow a copy instead of the original, the rule defines a copy as one that would be admissible in court proceedings as evidence of the original document.
The restriction lands on the communication itself. A person may not, in the course of business, communicate an invitation or inducement to engage in investment activity unless that person is authorised, the content is approved by an authorised person, or an exemption applies.
The exemption stands on a signature and its date. The high net worth individual exemption turns on a statement the individual has completed and signed within the twelve months ending on the day the communication is made, and on the prescribed warning being given with the communication.
The same twelve-month clock runs on the second route. The self-certified sophisticated investor exemption turns on a statement the individual has completed and signed within the twelve months ending on the day the communication is made.
Financial Services and Markets Act 2000 (Financial Promotion) Order 2005 (SI 2005/1529), art. 50A(1)
Admissible, and nothing beyond admissible. In any legal proceedings an electronic signature, and the certification of that signature by a person, are each admissible in evidence on the question of the authenticity or the integrity of the communication or data.
The statutory floor is shorter than the claim window. Accounting records must be preserved for three years from the date they are made by a private company, and for six years by a public company.
The third limb of the definition is the evidential one. Information is a trade secret only while it is secret, has commercial value because it is secret, and has been subject to reasonable steps in the circumstances by the person lawfully in control of it to keep it secret.
One Act runs two retention clocks of different lengths. Every company must keep copies of members’ written resolutions and minutes of general meetings for at least ten years from the date of the resolution, meeting or decision, and failure is an offence by every officer in default.
A general prohibition with an exhaustive list of exits. It is unlawful for relevant securities to be offered to the public in the United Kingdom unless the offer is of a kind specified in Part 1 of Schedule 1, or a combination of two or more of those kinds.
Public Offers and Admissions to Trading Regulations 2024 (SI 2024/105), reg. 12(1)
The Law Commission stated the position, and the formalities survive it. The Law Commission’s statement of the law is that an electronic signature is capable in law of executing a document, a deed included, provided the signatory intends to authenticate it and any formalities for that document are satisfied, and that an electronic signature is admissible in evidence in legal proceedings.
Four conditions, each leaving a dated artefact behind. A firm must not communicate a direct offer financial promotion for a restricted mass market investment to a retail client unless four conditions are satisfied: a cooling off period, a personalised risk warning, categorisation and appropriateness.
FCA Handbook, COBS 4.12A.15R, with COBS 4.12A.18R, 4.12A.20R, 4.12A.21R and 4.12A.28R
Verification is a document review with a date on it. An issuer relying on Rule 506(c) must take reasonable steps to verify that every purchaser is an accredited investor, and each of the safe harbour methods the rule lists is a document review or a written confirmation with a date attached to it.
17 CFR 230.506(c)(2)(ii), Regulation D under the Securities Act of 1933
Reasonable care is not established without a recorded inquiry. An issuer cannot establish that it exercised reasonable care over disqualifying events unless it made a factual inquiry into whether any exist, and the scope of that inquiry varies with the circumstances.
The duty is triggered by status and it is timed. Where an issuer sells under Rule 506(b) to a purchaser who is not an accredited investor, it must furnish the specified information to that purchaser a reasonable time prior to sale.
The rule describes evidence rather than process. The issuer must exercise reasonable care that purchasers are not underwriters, and the rule says that care may be demonstrated by a reasonable inquiry into who is buying, a written disclosure before sale that the securities are unregistered, and a legend on the certificate.
The rule accepts an audit trail in place of immutability. A broker-dealer keeping records electronically may satisfy the rule either by preserving them in a non-rewriteable, non-erasable format or by maintaining a complete time-stamped audit trail of every modification and deletion, with the date and time and the identity of the person, sufficient to permit re-creation of the original record.
Five years, and accessible within a reasonable period. All records a financial institution is required to retain under the Bank Secrecy Act regulations must be kept for five years and stored so as to be accessible within a reasonable period of time.
Where no record exists, one has to be made. Where no record of a transaction is made in the ordinary course of business, the institution must prepare one in writing, so the duty is to produce the record and not only to keep whatever happened to exist.
Ten years, and it reaches parties that are not banks. Every person engaging in a transaction subject to the sanctions regulations must keep a full and accurate record of it, available for examination for at least ten years after the transaction, whether or not the transaction was licensed.
31 CFR 501.601, Reporting, Procedures and Penalties Regulations
The operative word is "solely". For a transaction in or affecting interstate or foreign commerce, a signature, contract or record may not be denied legal effect, validity or enforceability solely because it is in electronic form.
15 U.S.C. 7001(a), Electronic Signatures in Global and National Commerce Act
A uniform act binds only where a state has enacted it. Under the Uniform Electronic Transactions Act as enacted in Delaware, a record or signature may not be denied legal effect or enforceability solely because it is in electronic form, and a retention requirement is met by an electronic record that accurately reflects the information and remains accessible for later reference.
Delaware Uniform Electronic Transactions Act, 6 Del. C. §§ 12A-107 and 12A-112(a)
The statute states the duty and defers the period. Financial institutions, designated non-financial businesses and professions and virtual asset service providers must retain all records, documents and data relating to transactions and make them immediately available to the competent authorities on request.
The five years live in the Executive Regulations. Records, documents, instruments and data for domestic and international transactions and commercial dealings must be retained for not less than five years from completion of the transaction or the end of the business relationship.
The clock restarts on the most recent of several triggers. Customer due diligence records, account files, business correspondence and suspicious transaction reports run for not less than five years from the most recent of several triggers, so a later inspection, investigation or final judgment restarts the clock rather than the account closure alone.
Holding the documents is not the same as holding them usably. Retained records must be organised so that individual transactions can be reconstructed, so the duty is not merely to hold the documents but to hold them in a form that can be put back together years later.
An original can be electronic where its integrity is evidenced. Where UAE law requires a document to be submitted or stored in its original form, an electronic document meets that requirement if there is technical evidence confirming the integrity of its information from the moment it was first created in final form, and if it can still present that information whenever it is requested.
Admissible, not presumed. The admissibility of an electronic document, electronic signature or electronic seal as evidence in legal proceedings cannot be denied merely because it is in electronic form.
The duty catches the analysis that led to no report at all. A Relevant Person must maintain sufficient records of transactions to enable individual transactions to be reconstructed, together with the customer due diligence documents, the business correspondence relating to the customer’s account and its own internal findings and analysis on unusual or suspicious business.
Where the record sits is a decision with conditions attached. Where these records are kept outside the DIFC, the firm must take reasonable steps to ensure they are held in a manner consistent with the Rules, ensure they remain easily accessible to it, and ensure that on the DFSA’s request they are immediately available for inspection.
The word in the rule is "immediately". A Relevant Person must maintain sufficient records of transactions to enable individual transactions to be reconstructed, and must immediately provide a copy of those records to the Regulator on request.
ADGM Anti-Money Laundering and Sanctions Rulebook, Rules 4.5.1(b)(ii) and 4.5.2
The same conditions, from a second regulator in a second jurisdiction. Where these records are kept outside ADGM, the firm must take reasonable steps to ensure they are held consistently with the Rules, keep them easily accessible to itself, and ensure that on the Regulator’s request they are immediately available for inspection.
ADGM Anti-Money Laundering and Sanctions Rulebook, Rule 4.5.5
Electronic retention satisfies the enactment only on conditions. Where an ADGM enactment requires a record to be retained, an electronic record satisfies that requirement only if it stays accessible for subsequent reference, keeps its original format or one demonstrably replicating the original information, and retains the information identifying the record’s origin, destination, the parties who sent or received it and the date and time.
One sentence, and it attaches no weight. An electronic record may be used as evidence of a record in any ADGM Court proceedings.
This clock runs the other way: it is a duty to stop. An organisation must cease to retain documents containing personal data, or remove the means of associating that data with particular individuals, as soon as it is reasonable to assume that the collection purpose is no longer served and retention is no longer necessary for legal or business purposes.
Three conditions, and the list is not exhaustive. A legal requirement to retain a document is satisfied electronically only if the information stays accessible for subsequent reference, the record keeps its original format or a format demonstrably representing it accurately, and the information identifying the record’s origin, destination and the date and time it was sent or received is retained as well.
One objection removed, nothing more. Information is not to be denied legal effect, validity or enforceability solely on the ground that it is in the form of an electronic record.
The written notice limb bites on one branch only. Where a prospectus has been registered and an offer is nonetheless made in reliance on the private placement or accredited investor exemption, the offeror must first have notified the Authority in writing of that intent and taken reasonable steps to inform the offeree in writing that the offer relies on the exemption.
Securities and Futures Act 2001, sections 272B(1)(d)(ii) and 275(1)(c)(ii)
The exemption turns on a running count. The private placement exemption holds only where offers are made to no more than 50 persons within any 12 month period and none of them is accompanied by an advertisement making the offer or calling attention to it, which makes the running count of who was approached, and when, part of what establishes the exemption.
The duty is to be able to hand it over, on a clock. Every record required to be kept under the Regulations must be kept in such a way that it can be provided to an authorised person within 30 days after a request to examine it is made.
Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations, SOR/2002-184, section 149
One figure hides three different start dates. Records required under the Regulations must be kept for at least five years, running from account closure for account records, from the last business transaction for records proving an entity’s existence, and from the day of creation for all other records.
Electronic retention is conditional on producing paper. A record required under the Regulations may be kept in machine-readable or electronic form only if a paper copy can readily be produced from it.
Proceeds of Crime (Money Laundering) and Terrorist Financing Regulations, SOR/2002-184, section 147
There is no federal securities regulator to answer to. Canada has no federal securities regulator: the Supreme Court of Canada held in 2011 that the proposed federal Securities Act as then drafted was not valid under the general trade and commerce power, so an issuer answers to provincial and territorial regulators rather than to a national one.
Ledger entries are published in English only, and cite each instrument by its own official name.
The marketing must be consistent with the white paper, and the white paper changes. Two years later the question is not whether the two ever agreed, but whether they agreed on the day a particular investor saw the post. That is a version, a publication date and a dissemination date, held together. Who in the company could produce all three today?
Twenty working days before publication, seven before a modification, and a publication that must be identical to what was notified. Ordering is the whole obligation. A file modification date on a shared drive describes the last write, not the first, and it describes nothing about the sending.
An exemption that turns on fewer than one hundred and fifty persons per member state, or on qualified investors alone, is a count the issuer must be able to reconstruct person by person (Art. 4(2)). The count is easy on the day. It is the reconstruction that fails.
An integrity duty with no end date, a registrar that may change, and an issuer who becomes the registrar by default if nobody else is named. What the issuer can show about the measures it took, and when, is the only answer it will have.
Ten years for the issuer's superseded white paper versions, an open-ended period for the register, and five to seven years for the records the investment firms around the issuance keep of their services to it. Platforms do not last that long. The record has to leave each platform with its dates intact, or it arrives in the next one carrying the next one's dates.
A distributed ledger is a superb record of transfers. It records nothing about the white paper version that was notified, the marketing that was published beside it, the eligibility assessment that preceded an allocation, or the signature on the subscription document. Those live in a document tool, a mailbox, a spreadsheet and a signing vendor, each with its own clock, and the joint between them is where the proof is supposed to be.
The venue, the custodian and the registrar hold their own records, as they must, and each of those records is attested by the party that produced it. None of them was built to answer the issuer's question, which is about ordering and consistency across all of them.
On Exedra Gate the issuer, its counsel and its investors work inside one system rather than around it. Identity verification, investor categorisation, the data room, the versioned offering documents, contracts, signatures, deadlines and the correspondence that carries them run in one flow, and each step becomes an entry as it happens: sent, opened, read, signed and independently timestamped under RFC 3161. Nobody writes the protocol afterwards.
Set against the five situations above, every white paper or prospectus version is a signed artefact with its own date, its notification and its publication are recorded as entries beside it, and each marketing asset is linked to the version it was written against, so consistency on a given day is a lookup rather than a reconstruction. Eligibility and categorisation are recorded per investor under the issuer's own policy, with the dates. The subscription documents are generated, signed on the phone and independently timestamped as they are signed. And the issuer's own integrity measures for the register are entries too, dated when they were taken.
The boundary is stated, not implied. Exedra Gate does not issue, list, trade, match, settle, transfer or custody a token, and does not keep a statutory register. The issuer's licensed registrar, venue and custodian do those things, and the room records what the issuer did around them. Whether a token is a security or a crypto-asset, and which regime therefore applies, is decided by the issuer with counsel; the room carries the record of that decision and its date.
A document is fingerprinted, the fingerprints are chained and signed, and the record carries a timestamp from an independent authority. Years later, a different reviewer runs the same check with free standard tools and confirms the documents are unchanged and existed at that moment.
The record of an issuance is the issuer's. It leaves with the issuer in one shape, in standard formats, and is checked on the issuer's own machine. Deployment, residency and the export are described once, for every sector, on the institutional page: how the rail is deployed.
A workspace per issuance. Each offering is its own room with its own clocks, its own document versions and its own investor list, held beside the others.
The versioned documents. White paper or prospectus, term sheet, subscription documents: each version signed and dated, superseded versions kept and marked, notification and publication recorded as entries beside them.
Identity, categorisation and eligibility. Investors are verified once and categorised under the issuer's policy; the exemption counts are reconstructable person by person, with dates.
Marketing linked to its version. Each asset is recorded against the document version it was written for, so the consistency question for any date is answered by lookup.
Contracts and signatures. Generated in the room, signed on the phone and independently timestamped as they are signed, with who opened what recorded alongside them.
The export. One evidence pack per issuance, in one shape, handed to a registrar, a venue, an auditor or a supervisor's request rather than assembled for them, and checked on their own machine with free standard tools.
The compliance rail is live in production today. The mobile app is arriving and is named as arriving wherever it appears. What runs today, in full.
The rules are published and the retention periods are long. The questions arrive on their own schedule, usually about a version that no longer exists anywhere but in the record, and they are answered from records or from memory. An issuer that prepares answers from the record. Exedra Gate exists for it.
Access is by invitation. A short note on the issuance and its situation is enough; where there is a fit, the walkthrough happens on a live system, using the issuer's own scenario.
Exedra Gate is a technology platform, not a broker, dealer, custodian, escrow provider, or investment adviser. It never holds, routes, or settles investor funds, does not recommend offerings to investors, and charges no success-based fees on raises. For tokenised assets it is the compliance, preparation and evidence layer only: it does not issue, list, trade, match, settle, transfer or custody tokens and does not keep a statutory securities register; those activities are performed by licensed third parties. Records and timestamps attest integrity and existence as of a date, not compliance with any particular regime; that judgment remains with the issuer and its counsel.
Regulatory references on this page are orientation, not legal advice: see Sources & verification.