Executive TL;DRTen regulatory sandboxes are currently active globally for tokenised digital assets as of September 2026. They span the EU, UK, Singapore, Hong Kong, the UAE (three distinct regimes), Bahrain, India, and Australia. Each provides temporary exemptions from specific provisions of existing securities, settlement, or payment law allowing issuers and infrastructure operators to test compliant tokenised asset programmes under regulatory supervision before permanent frameworks are finalised. The EU DLT Pilot Regime (Regulation EU 2022/858) remains the most structured programme, with a €6 billion per-operator threshold and three distinct infrastructure categories. The UK Digital Securities Sandbox, launched jointly by the FCA and Bank of England, runs for a five-year window and is currently the most open in scope. Singapore’s MAS Regulatory Sandbox continues to accept applications under a case-by-case model. The UAE operates three separate sandbox-equivalent regimes (ADGM, VARA, DFSA/DIFC), none of which are directly interchangeable. This hub documents every active sandbox in detail: the regulator, the legal basis, what is exempted, the financial thresholds, the application process, the eligibility criteria, and what each is best suited for. It replaces the previous article covering sovereign bond regulatory approaches, which is incorporated into the EU and Asia-Pacific sections below. Key finding: No single sandbox covers all tokenised asset types across all jurisdictions. Issuers typically select a primary sandbox jurisdiction based on target investor geography, asset class, and settlement currency and then layer in multi-jurisdiction licensing once the programme is operational. |
Regulatory sandboxes for tokenised assets are not a peripheral feature of the digital finance landscape. They are the mechanism through which the most significant issuances in the market have been structured from the European Investment Bank’s multi-year tokenised bond programme to the Hong Kong Monetary Authority’s world-record digital green bond offering to MAS Singapore’s CBDC-settled government bills pilot. Understanding which sandbox applies to which issuance category, what it actually exempts, and how to apply is the starting point for any institutional issuer evaluating a tokenised capital formation programme.
This hub is structured as a reference resource, not a narrative article. Each sandbox is documented with the same set of data fields to allow direct comparison. The comparison table at the top of each section provides the quick reference; the deeper profiles that follow provide the operational detail.
Global Sandbox Comparison: At a Glance
The table below covers every live regulatory sandbox or sandbox-equivalent regime for tokenised digital assets as of September 2026. ‘Threshold’ refers to the maximum value of digital assets or exposures permitted within the sandbox; ‘Status 2026’ reflects the current operational state; ‘Key Exemption’ identifies the primary piece of legislation from which the sandbox provides temporary relief.
| Sandbox / Framework | Jurisdiction | Regulator | Threshold | Status 2026 | Key Exemption |
| EU DLT Pilot Regime | European Union | ESMA + NCAs | €6B per operator | Active — under review | CSDR, MiFID II, MiFIR |
| UK Digital Securities Sandbox | United Kingdom | FCA + Bank of England | Not publicly capped | Active — 5-year window | FSMA market infrastructure rules |
| MAS Regulatory Sandbox | Singapore | Monetary Authority of Singapore | Case-by-case | Active — open applications | PSA and SFA provisions |
| HKMA Fintech Supervisory Sandbox | Hong Kong | HKMA + SFC | Case-by-case | Active — ongoing pilots | Banking Ordinance (selected provisions) |
| ADGM FSRA RegLab | Abu Dhabi (UAE) | Financial Services Regulatory Authority | Case-by-case | Active — cohort model | FSMR selected provisions |
| VARA Innovation Hub | Dubai (UAE) | Virtual Assets Regulatory Authority | AED 1.5M min. capital | Active — VARA Rulebook v2.0 | Pre-licence testing environment |
| CBB Regulatory Sandbox | Bahrain | Central Bank of Bahrain | BD 50,000 min. capital | Active — Module FS-6 | CBB CRA Module exemptions |
| DFSA Digital Assets Regime | DIFC (UAE) | Dubai Financial Services Authority | Case-by-case | Active — updated Jan 2026 | DIFC law digital asset provisions |
| SEBI Innovation Sandbox | India | Securities and Exchange Board of India | Case-by-case | Active — limited scope | SEBI regulations (testing only) |
| ASIC Regulatory Sandbox | Australia | Australian Securities & Investments Commission | AUD 5M exposure cap | Active — 24-month exemption | Corporations Act provisions |
Note on UAE complexity: The UAE operates three distinct regulatory regimes for tokenised assets — ADGM (Abu Dhabi), VARA (Dubai mainland), and DFSA (DIFC, Dubai). A firm licensed in one regime is not automatically compliant in the others. The VARA-SCA cooperation agreement signed in 2025 improves coordination for cross-regime operations but does not eliminate the need for jurisdiction-specific authorisation. Each is documented separately below.
EU DLT Pilot Regime (Regulation EU 2022/858)
EU DLT Pilot Regime
| Regulator | ESMA (oversight) + National Competent Authorities (authorisation) e.g. CySEC, BaFin, AMF, AFM |
| Jurisdiction | European Union (all member states) |
| Status (2026) | Active entered force March 2023. Extended and under review for permanent framework, 2026 |
| Legal framework | Regulation (EU) 2022/858 on a pilot regime for market infrastructures based on distributed ledger technology |
| Asset/market threshold | €6 billion aggregate market value per DLT Market Infrastructure operator. Specific instrument caps: DLT transferable securities €6B (equities) / €6B (bonds, money market instruments, UCITS shares); DLT financial instruments admitted to a DLT MTF €9B |
| Duration | Six-year pilot period (2023–2029); subject to 2026 ESMA review that may accelerate permanent framework |
| Best suited for | EU-domiciled institutional bond and equity issuances; supranational issuances (EIB model); settlement infrastructure operators seeking CSDR exemptions |
The EU DLT Pilot Regime is the most structurally complex of the global sandboxes, reflecting the EU’s existing multi-layered financial market infrastructure regulation. It does not directly exempt issuers it exempts the market infrastructures (trading and settlement systems) that issuers use. Understanding this distinction is critical: an issuer does not ‘apply to’ the DLT Pilot Regime directly; rather, the issuer selects a DLT Market Infrastructure operator that has obtained authorisation under the Regime, and the issuer’s instrument is admitted to that authorised infrastructure.
Three Infrastructure Categories
The Regime authorises three categories of DLT Market Infrastructure. Each has different scope, different thresholds, and requires authorisation from a different national competent authority depending on where the operator is domiciled:
- DLT Multilateral Trading Facility (DLT MTF): Trading venue infrastructure. Authorised under MiFID II + DLT Pilot Regime exemptions. Operates with temporary exemptions from specific MiFID II provisions that prevent DLT-based settlement for transferable securities.
- DLT Settlement System (DLT SS): Settlement infrastructure only. Authorised under CSDR + DLT Pilot Regime exemptions. Provides the most significant exemptions from CSDR’s requirements for central securities depositories — the primary exemption category that makes tokenised bond settlement operationally viable.
- DLT Trading and Settlement System (DLT TSS): Combined trading and settlement on a single DLT infrastructure. The rarest category; requires both MiFID II and CSDR exemptions simultaneously. Authorised with enhanced regulatory conditions reflecting the combined scope.
Key Exemptions in Practice
For institutional issuers, the most practically significant exemptions are: the CSDR exemption that allows tokenised bonds to settle on DLT infrastructure rather than through a traditional central securities depository; the MiFIR exemption that allows trading of tokenised securities on DLT MTFs without mandatory trading obligations; and the MiFID II dematerialisation exemption that allows securities to exist as tokens rather than in traditional book-entry form.
The EIB Programme The Reference Case
The European Investment Bank’s multi-year tokenised bond programme is the reference implementation for the DLT Pilot Regime. The EIB’s initial issuance a €100 million two-year bond in April 2021 (pre-dating the Regime, under a French experimental regime) established the template. Subsequent issuances under the Regime have expanded to sterling, yen, and euro denominations across multiple networks, managed by Goldman Sachs, Santander, and Société Générale, settled in Banque de France digital euros.
The EIB programme’s significance lies in its consistency: it is not a single proof-of-concept but an ongoing, expanding programme that demonstrates institutional commitment. The fact that the world’s second-largest supranational bond issuer has made DLT Pilot Regime issuance a standard part of its funding programme provides the clearest signal that the framework works at institutional scale.
Application Process
- Operators apply to their national competent authority (NCA) the relevant EU member state financial regulator based on the operator’s domicile.
- Application must demonstrate: technical capability to operate DLT infrastructure; legal analysis of which CSDR/MiFID II/MiFIR provisions require exemption; supervisory arrangements for investor protection within the sandbox; interoperability arrangements with existing settlement infrastructure.
- ESMA coordinates cross-border regulatory cooperation between NCAs for operations that involve participants in multiple member states.
- Timelines: 3–6 months for initial NCA review; ESMA coordination may extend this for novel cases.
UK Digital Securities Sandbox (DSS)
UK Digital Securities Sandbox
| Regulator | Financial Conduct Authority (FCA) + Bank of England (jointly administered) |
| Jurisdiction | United Kingdom |
| Status (2026) | Active — launched 2024 under FSMA 2023. Five-year operational window confirmed. |
| Legal framework | Financial Services and Markets Act 2000 (as amended by FSMA 2023); Financial Market Infrastructure Sandbox Regulations 2023 |
| Asset/market threshold | Not publicly capped at the programme level. Individual firm permissions set case-by-case. Designed to scale toward full market participation within the five-year window. |
| Duration | Five-year window confirmed by BoE Deputy Governor Sarah Breeden (May 2026). Permanent framework to be determined based on learnings by year five. |
| Best suited for | UK-domiciled tokenised securities trading and settlement infrastructure; firms testing DLT-based alternatives to traditional CSD, exchange, or clearing house functions |
The UK Digital Securities Sandbox is the most recently scaled sandbox and, in terms of flexibility, the most open in scope. Unlike the EU DLT Pilot Regime which exempts from specific named provisions of specific named regulations the DSS uses a broader ‘modifications to legislation’ approach enabled by FSMA 2023, allowing the FCA and Bank of England to modify financial services legislation as needed for sandbox participants, rather than requiring legislative change before each exemption can be granted.
What the DSS Modifies
The DSS is specifically designed for firms that would otherwise need to be authorised as: a Recognised Investment Exchange (RIE), a Recognised Clearing House (RCH), or a Central Securities Depository (CSD). These are the traditional market infrastructure categories whose rules prevent or constrain DLT-based alternatives. Within the DSS, these authorisation and operating requirements are modified to allow DLT-based equivalents to operate during the sandbox period.
The Great British Tokenised Deposits Pilot
Running alongside the DSS infrastructure sandbox is the Great British Tokenised Deposits pilot, coordinated by UK Finance with Barclays, HSBC, Lloyds, NatWest, Nationwide, and Santander. The pilot tests live commercial bank tokenised deposits across three use cases: marketplace payments, remortgaging, and digital asset settlement. This commercial bank pilot provides the settlement currency infrastructure that tokenised securities within the DSS can ultimately settle against — creating the same sovereign credit quality settlement architecture that Singapore is building with wholesale CBDC.
Application Process
- Applications submitted jointly to FCA and Bank of England through the DSS application portal.
- Applicants must demonstrate: the specific market infrastructure function being replicated (trading, clearing, or settlement); which legislative requirements require modification; how investor and financial stability protections will be maintained during the sandbox period.
- The FCA has confirmed that tokenised fund registers are compatible with existing regulation and eligible for DSS participation through the Blueprint model, which allows DLT-based fund unit registers without full regulatory change.
- Timelines: variable; the FCA has indicated a collaborative engagement process rather than a fixed review timeline.
Singapore: MAS Regulatory Sandbox and Project Guardian
MAS Regulatory Sandbox
| Regulator | Monetary Authority of Singapore |
| Jurisdiction | Singapore |
| Status (2026) | Active — ongoing. Applications accepted on a rolling basis. ‘Sandbox Express’ track available for lower-risk activity types. |
| Legal framework | Payment Services Act (PSA) 2019 (as amended); Securities and Futures Act (SFA); MAS Regulatory Sandbox Guidelines (updated 2023) |
| Asset/market threshold | Case-by-case basis. MAS sets specific exposure or transaction limits as sandbox conditions. No universally published cap. |
| Duration | Defined per applicant; typically 9–24 months for initial sandbox period, with extension possible. Sandbox Express: automatic 9-month period. |
| Best suited for | Payment token services; digital asset exchanges; tokenised fund distribution; wholesale CBDC settlement pilots; institutional digital lending |
Singapore’s approach to regulatory sandboxes for tokenised assets is distinctive in two ways: it operates a general-purpose sandbox that accepts applications across all fintech categories (including tokenised assets), and it runs a parallel industry-wide initiative — Project Guardian — that is itself structured as a collaborative sandbox with institutional participants.
Project Guardian
Project Guardian is the MAS’s industry pilot for institutional digital asset markets, involving over 40 financial institutions including JPMorgan, DBS, Standard Chartered, HSBC, and others across multiple workstreams. It is not a regulatory sandbox in the formal sense participants do not receive individual exemptions but it provides a supervised environment with MAS engagement and policy development input from live institutional activity. Project Guardian workstreams cover: tokenised bonds, tokenised funds, tokenised deposits, cross-border FX settlement, and institutional DeFi protocols.
CBDC-Settled Tokenised Government Bills (2026)
MAS’s 2026 pilot for tokenised Singapore government bills settled with wholesale CBDC represents the most technically advanced sovereign debt tokenisation programme globally: a government obligation, represented as a tokenised instrument, settling against central bank-issued digital Singapore dollars rather than private stablecoins. The wholesale CBDC settlement eliminates private settlement asset risk and delivers end-to-end sovereign credit quality across both the instrument and its settlement currency. The pilot builds on Singapore’s 2025 interbank overnight lending trial in which the three major local banks completed transactions using wholesale CBDC.
Application Process
- Applications submitted through the MAS regulatory sandbox portal at mas.gov.sg. Sandbox Express applicants use a simplified self-assessment track.
- Standard application requires: description of the proposed activity; analysis of regulatory requirements that create barriers to the activity; customer safeguards; exit strategy if sandbox is not converted to full licensing; timeline and success metrics.
- MAS engages in pre-application discussions and offers the ‘FinTech Bridge’ programme for foreign firms exploring Singapore market entry.
- Timelines: 6–9 months for standard assessment; Sandbox Express operates on a 21-day initial response timeline.
Hong Kong: HKMA Fintech Supervisory Sandbox and SFC
HKMA Fintech Supervisory Sandbox (FSS) + SFC Regulatory Sandbox
| Regulator | Hong Kong Monetary Authority (HKMA) for banking/monetary; Securities and Futures Commission (SFC) for securities |
| Jurisdiction | Hong Kong SAR |
| Status (2026) | Active — HKMA FSS accepting applications; SFC sandbox available for VATPs and tokenised securities pilots. |
| Legal framework | Banking Ordinance (Cap. 155) — HKMA; Securities and Futures Ordinance (SFO) — SFC; HKMA/SFC joint circular on tokenisation (Feb 2023) |
| Asset/market threshold | Case-by-case. HKMA FSS sets customer number and transaction caps per institution. SFC VATP licensing has no tokenised asset cap but requires capital requirements (HKD 5M paid-up). |
| Duration | HKMA FSS: typically 12 months with extension. SFC sandbox: VATP conditional licensing with no fixed end date. |
| Best suited for | Tokenised green bonds (HKMA sovereign programme); tokenised fund distribution (SFC VATP pathway); retail tokenised product access (Hong Kong’s unique retail permission) |
Hong Kong’s sandbox landscape is divided between two regulators with distinct mandates. The HKMA’s Fintech Supervisory Sandbox focuses on banking and monetary technology it is the channel through which the HKMA’s own tokenised green bond programme operates. The SFC’s regulatory sandbox provides the licensing pathway for Virtual Asset Trading Platforms (VATPs) and, by extension, the distribution of tokenised securities products to retail and institutional investors in Hong Kong.
The HKMA Digital Green Bond Programme
The HKMA’s tokenised green bond series represents the world’s largest single digital bond offering the November 2025 issuance exceeded all previous digital bond size records globally. Executed through HSBC’s Orion digital bond platform, the programme simultaneously demonstrates Hong Kong’s green finance positioning and the HKMA’s institutional-grade tokenised bond infrastructure. Multi-year commitment to the programme not a single pilot signals government-level validation of the model.
Hong Kong’s Retail Distinction
Hong Kong is distinctive among major financial centres in permitting retail investor access to tokenised assets through the VATP licensing regime a permission that Singapore explicitly does not extend to retail participants under its Payment Services Act framework. This makes Hong Kong uniquely positioned for tokenised products targeting a broader investor base, though the SFC’s disclosure and marketing requirements for retail products are correspondingly stringent.
Application Process
- HKMA FSS: Applications through HKMA’s banking supervisory team. Requires engagement with HKMA before formal application; HKMA assigns a dedicated relationship manager for sandbox participants.
- SFC VATP: Applications for virtual asset trading platform licensing (Type 1 and Type 7 regulated activities in the digital asset context). Capital requirement: HKD 5 million paid-up share capital; insurance requirements apply.
- Timelines: HKMA FSS 3–6 months; SFC VATP conditional licensing has been running 12–18 months for complex applications
Abu Dhabi Global Market (ADGM) FSRA RegLab
ADGM FSRA Digital Assets Framework + RegLab
| Regulator | Financial Services Regulatory Authority (FSRA), Abu Dhabi Global Market |
| Jurisdiction | Abu Dhabi Global Market (ADGM), UAE |
| Status (2026) | Active — ADGM digital asset framework updated June 2025. RegLab cohort programme ongoing. |
| Legal framework | Financial Services and Markets Regulations (FSMR); FSRA Guidance on Regulation of Digital Securities (updated June 2025); ADGM Arbitration Centre for dispute resolution |
| Asset/market threshold | Case-by-case per RegLab participant. Full FSRA licensing: no asset threshold cap, but capital requirements apply (minimum USD 140,000 to USD 2M depending on licence category). |
| Duration | RegLab: 2-year initial period with renewal option. Full FSRA digital securities licence: indefinite (ongoing regulatory relationship). |
| Best suited for | Institutional digital securities issuance under English common law; cross-border distribution to GCC, European, and Asian institutional investors; infrastructure operators seeking an established common-law framework |
ADGM was the first jurisdiction globally to introduce a comprehensive regulatory framework specifically addressing digital assets a distinction that has given it a track record and regulatory sophistication that newer UAE frameworks have not yet matched. The FSRA’s June 2025 framework update extended and refined its approach to digital securities, creating what is arguably the most institutionally mature digital asset regulatory environment in the GCC.
Why Common Law Matters for Institutional Issuers
ADGM operates under an independent, English common law legal system distinct from both UAE civil law (which applies in Dubai’s mainland and in many free zones) and the DIFC’s own common law jurisdiction. For institutional investors evaluating tokenised asset risk, English common law provides the most familiar and tested framework for legal enforceability of token-based claims, SPV structures, and security interests. This is a material consideration for cross-border institutional distribution, particularly to European and UK investors who are themselves operating under English common law or closely aligned civil law frameworks.
FSRA RegLab
The FSRA’s RegLab provides a supervised innovation environment for firms developing novel financial technology products. Participants receive a restricted-scope Financial Services Permission that allows them to test their model with real customers and transactions under FSRA supervision. The RegLab is structured as a cohort programme FSRA accepts applications on a rolling basis and groups participants with similar activity types for coordinated review and policy development.
Application Process
- Pre-application engagement with FSRA’s Innovation Office is strongly recommended and effectively required for novel products.
- Formal application requires: business plan; legal analysis of applicable FSMR provisions; technology documentation; AML/CTF programme; key personnel fit and proper assessment.
- For institutional digital securities: minimum capital USD 140,000 (Category 4 licence) to USD 2M+ (Category 1, full dealing/managing); professional indemnity insurance required.
- Timelines: RegLab 4–8 months; full FSRA licence application 6–12 months.
Dubai: VARA (Virtual Assets Regulatory Authority)
VARA Virtual Asset Regulatory Framework + Innovation Testing Environment
| Regulator | Virtual Assets Regulatory Authority (VARA), Dubai |
| Jurisdiction | Dubai Mainland (not DIFC or ADGM) |
| Status (2026) | Active VARA Rulebook v2.0 effective May 2025. UAE SCA-VARA cooperation agreement 2025. |
| Legal framework | Dubai Law No. 4 of 2022 (establishing VARA); VARA Virtual Asset and Related Activities Regulations 2023; VARA Rulebook v2.0 (May 2025); UAE SCA Decision No. 15/RM/2025 (June 2025) |
| Asset/market threshold | AED 1.5 million minimum capital (Category 1 — Asset-Referenced Virtual Asset issuer). Monthly reserve audits mandatory. Retail access permitted subject to marketing approval. |
| Duration | VARA licence: indefinite. Pre-licence testing environment: defined per agreement with VARA. |
| Best suited for | Dubai-market tokenised asset issuance; retail-accessible tokenised products with marketing approval; firms targeting UAE mainland investor base; VARA-compliant ARVA (Asset-Referenced Virtual Asset) structures |
VARA is the world’s first standalone virtual asset regulatory authority — a dedicated regulator whose sole mandate is the virtual asset sector, unlike other jurisdictions where digital asset oversight sits within a broader securities or banking regulator. This focus has produced both regulatory clarity (VARA has issued more detailed rulebooks on specific virtual asset activities than any comparable regulator) and regulatory complexity (VARA’s jurisdiction covers only Dubai mainland, not the DIFC or ADGM, requiring separate arrangements for firms operating across UAE jurisdictions).
VARA Rulebook v2.0 Key Changes
The May 2025 Rulebook update introduced the Asset-Referenced Virtual Asset (ARVA) category a dedicated classification for tokenised real-world assets that is separate from both utility tokens and currency tokens. ARVA issuers must obtain a Category 1 Licence, maintain monthly reserve audits, provide full whitepaper disclosure, and satisfy VARA’s ongoing reporting obligations. This creates a clear regulatory pathway for tokenised real estate, tokenised bonds, and tokenised commodities that operates within VARA’s framework rather than attempting to fit them into pre-existing categories.
UAE Regulatory Fragmentation
Issuers evaluating the UAE market should approach it as four distinct regulatory environments: VARA (Dubai mainland), ADGM (Abu Dhabi), DFSA (DIFC, Dubai free zone), and SCA (federal securities). The SCA Decision No. 15/RM/2025 created a federal framework for security tokens that interacts with but does not supersede the free zone regimes. A VARA licence covers Dubai mainland activities; institutional investors in ADGM or DIFC require separate engagement with FSRA or DFSA respectively.
Application Process
- Initial Approval (IA): First-stage VARA engagement; applicants submit business plan, technical documentation, compliance programme, and key personnel details.
- Minimum Viable Product (MVP) Licence: Restricted licence allowing limited operations while VARA conducts full review. Typical duration 6–12 months before Full Market Product (FMP) licence.
- Full Market Product (FMP) Licence: Full operational licence. Capital requirements: AED 1.5M minimum for ARVA issuers; AED 10M for VA Exchange operators.
- Timelines: IA to FMP typically 12–18 months for complex categories.
Bahrain: CBB Regulatory Sandbox and Crypto-Asset Module
CBB Regulatory Sandbox + Crypto-Asset Module (CRA)
| Regulator | Central Bank of Bahrain (CBB) |
| Jurisdiction | Kingdom of Bahrain |
| Status (2026) | Active — CBB Crypto-Asset Module operational; Sandbox Module FS-6 active. First MENA dedicated blockchain regulatory sandbox. |
| Legal framework | CBB Law (Decree Law No. 64 of 2006); CBB Rulebook Volume 6 — Crypto-Asset Module (CRA); CBB Sandbox Conditions Module (FS-6) |
| Asset/market threshold | BD 50,000 (approximately USD 133,000) minimum capital for sandbox participants. Full CRA licence: BD 100,000–200,000 depending on activity type. |
| Duration | Sandbox: initial 9-month period; up to 2 years with extension. CRA full licence: indefinite. |
| Best suited for | GCC-focused tokenised asset issuance; Islamic finance structures (sukuk tokenisation); issuers targeting Bahraini and broader GCC institutional investors; IILM sukuk tokenisation infrastructure |
Bahrain’s CBB launched the first dedicated regulatory sandbox in the MENA region for blockchain and digital asset firms, giving it a track record that extends back further than any other GCC regulator in this space. The CBB’s Crypto-Asset Module (CRA) part of Volume 6 of the CBB Rulebook provides a comprehensive framework that was the first in the GCC to specifically address the licensing and compliance requirements for crypto-asset service providers, including tokenised security issuers.
Islamic Finance Integration
Bahrain’s position at the centre of the global Islamic finance industry makes the CBB’s framework uniquely relevant for tokenised sukuk and other Shari’ah-compliant digital instruments. The IILM (International Islamic Liquidity Management Corporation), headquartered in Kuala Lumpur but operating through Bahrain’s Islamic finance ecosystem, has been exploring tokenisation of its US dollar sukuk instruments specifically designed for intraday and overnight liquidity management by Islamic financial institutions globally. Tokenised IILM sukuk would combine sovereign-level credit quality (backed by GCC and other member government guarantees), Shari’ah compliance, and the T+0 settlement characteristics that are directly valuable for the liquidity management applications these instruments serve.
Application Process
- Sandbox application submitted to CBB FinTech Unit. Applications reviewed against FS-6 conditions; CBB engages with applicants through structured dialogue process before formal submission.
- Required documentation: business plan; regulatory analysis identifying applicable CBB rulebook provisions; technology description; AML/CTF programme; proposed customer safeguards.
- Full CRA licence application: additional capital adequacy, governance, and operational risk requirements under Volume 6 of the CBB Rulebook.
- Timelines: Sandbox application 3–4 months; full CRA licence 6–9 months.
DFSA (Dubai International Financial Centre)
DFSA Digital Assets Regime (DIFC)
| Regulator | Dubai Financial Services Authority (DFSA) |
| Jurisdiction | Dubai International Financial Centre (DIFC) — free zone, separate from Dubai mainland |
| Status (2026) | Active — updated digital asset token rules effective 12 January 2026. |
| Legal framework | DIFC Law No. 1 of 2004 (Regulatory Law); DFSA Rulebook Conduct of Business Module (COB); DFSA Crypto Token Rules (January 2026 update); DIFC Data Protection Law |
| Asset/market threshold | Case-by-case. Capital requirements: USD 140,000 minimum for Category 3A (dealing); USD 500,000 for Category 3B (managing investments); USD 10M for Category 3C (providing credit). |
| Duration | DFSA licence: indefinite. Innovation Testing Licence (ITL): 12-month initial period. |
| Best suited for | Institutional cross-border digital securities; tokenised fund management; regulated digital asset custody; English common law-governed structures with DIFC court enforcement |
The DIFC and ADGM are the UAE’s two major English common law financial free zones. Both are distinct from VARA’s mainland Dubai jurisdiction. The DFSA updated its crypto token rules in January 2026, creating specific pathways for tokenised securities, tokenised fund units, and digital asset custody. The DIFC’s court system with its own Common Law courts and enforcement mechanisms provides a dispute resolution pathway that is familiar to international institutional participants.
Innovation Testing Licence
The DFSA’s Innovation Testing Licence provides a time-limited permission for firms to test novel financial services within the DIFC under modified regulatory conditions. Unlike some sandbox programmes, the ITL requires firms to have a credible path to full DFSA licensing it is a bridge to full authorisation, not an end state.
Application Process
- Pre-application meeting with DFSA FinTech team. DFSA operates an ‘InFocus’ programme for firms at early stages of application development.
- Innovation Testing Licence application: simplified business plan; key personnel details; description of which DFSA rules require modification during testing.
- Full DFSA digital asset licence: complete regulatory business plan; capital adequacy; governance framework; AML/CTF programme; technology risk assessment.
- Timelines: ITL 3–6 months; full DFSA licence 6–12 months.
India and Australia: Additional Active Sandboxes
SEBI Innovation Sandbox (India)
SEBI Innovation Sandbox
| Regulator | Securities and Exchange Board of India (SEBI) |
| Jurisdiction | India |
| Status (2026) | Active — limited scope. For technology testing only; does not exempt from SEBI registration requirements. |
| Legal framework | SEBI (Regulatory Sandbox) (Amendment) Regulations 2023; SEBI Circular SEBI/HO/ITD/2023 |
| Asset/market threshold | Testing with historical/synthetic data only in initial phase; live customer testing requires separate SEBI registration. |
| Duration | 6 months per cohort; extension on case-by-case basis. |
| Best suited for | Indian fintech and RegTech firms testing technology solutions for securities markets; not suitable for tokenised asset issuance without separate SEBI registration |
SEBI’s Innovation Sandbox is materially more limited than the sandboxes covered above: it permits technology testing against simulated or historical securities data rather than live issuance or customer transactions. Indian tokenised bond developments including the REC ₹500 crore tokenised bond (settled via RBI wholesale CBDC) and the L&T follow-on operate outside the SEBI sandbox under separate RBI and SEBI DEMAT 2.0 frameworks, not through the SEBI Innovation Sandbox.
ASIC Regulatory Sandbox (Australia)
ASIC Regulatory Sandbox
| Regulator | Australian Securities and Investments Commission (ASIC) |
| Jurisdiction | Australia |
| Status (2026) | Active — 24-month exemption period; enhanced sandbox for complex activities requires ASIC application. |
| Legal framework | Corporations Act 2001 (s 911A); ASIC Corporations (Concept Validation Licensing Exemption) Instrument 2016/1175; ASIC Regulatory Guide 257 |
| Asset/market threshold | AUD 5 million maximum customer exposure; up to 100 retail customers (basic sandbox). Enhanced sandbox: higher thresholds on application. |
| Duration | 24 months; enhanced sandbox duration negotiated per application. |
| Best suited for | Australian fintech firms developing tokenised asset propositions; firms testing compliance technology for digital asset markets |
Choosing the Right Sandbox for Your Tokenised Asset Programme
No single sandbox is optimal for all tokenised asset programmes. The selection framework below maps the key decision variables to the most appropriate sandbox jurisdiction:
| If your priority is… | Primary sandbox consideration | Secondary options |
| EU investor distribution for institutional bonds | EU DLT Pilot Regime (via an authorised DLT Market Infrastructure operator) | UK DSS for parallel UK investor access |
| UK-focused tokenised securities issuance or infrastructure | UK Digital Securities Sandbox | ADGM for international institutional overlay |
| Asian institutional distribution (no retail) | MAS Regulatory Sandbox / Project Guardian | HKMA FSS for Hong Kong institutional access |
| Retail-accessible tokenised products in Asia | Hong Kong SFC (VATP licensing) | HKMA FSS for banking product overlay |
| GCC institutional issuance under English common law | ADGM FSRA (Abu Dhabi) | DFSA (DIFC) for trading/settlement overlay |
| Dubai mainland market or UAE ARVA issuance | VARA (Full Licence or MVP stage) | ADGM or DFSA for cross-free-zone institutional access |
| Islamic finance / sukuk tokenisation | CBB (Bahrain) Crypto-Asset Module | ADGM for cross-border distribution |
Practical note: Most multi-jurisdiction capital formation programmes select one primary sandbox for issuance and a second jurisdiction for distribution infrastructure. The EU DLT Pilot Regime paired with ADGM is the most common institutional combination for GCC-European cross-border bond programmes. For India-focused tokenised debt, the RBI wholesale CBDC and SEBI DEMAT 2.0 frameworks (not the SEBI Innovation Sandbox) are the relevant regulatory pathways.
Blockmaze and the Global Regulatory Sandbox Landscape
Blockmaze is not waiting for regulatory frameworks to mature it already operates within them. Across eleven regulatory authorisations in eight jurisdictions, Blockmaze’s infrastructure is built to function inside the compliance requirements that this hub documents: CBB Module FS-6 in Bahrain, the ADGM FSRA’s digital securities framework in Abu Dhabi, VARA’s Rulebook v2.0 in Dubai, and the DFSA’s updated digital asset regime in the DIFC. For institutional issuers evaluating which regulatory pathway gives them the cleanest route to compliant tokenised capital formation whether that is a GCC private credit instrument, a real estate development bond, a deep tech convertible, or an entertainment financing structure Blockmaze’s multi-jurisdiction licensing means the compliance infrastructure is already in place, not something that needs to be built as a first step. The same identity-verified allowlists, Proof of Reserve attestation every fifteen days, DAO governance, and compliance-enforced transfer restrictions that this hub describes as sandbox requirements are what the Blockmaze network delivers operationally.
Frequently Asked Questions:-
1. What is a regulatory sandbox in the context of tokenised assets?
A regulatory sandbox is a supervised environment in which a regulator allows firms to test novel financial products or services under real market conditions with temporary exemptions from specific regulatory requirements that would otherwise prevent or constrain the activity. In the tokenised asset context, sandboxes typically exempt participants from rules designed for traditional (non-DLT) settlement, trading, or custody infrastructure allowing firms to operate tokenised alternatives during a defined testing period while the regulator develops permanent frameworks.
2. Is a regulatory sandbox the same as a regulatory licence?
No. A sandbox provides temporary, conditional permission to test an activity under modified regulatory conditions. A full regulatory licence provides indefinite permission to operate the activity subject to ongoing compliance with all applicable rules. Sandbox participation typically has a fixed duration and scale limit; a full licence does not. Some sandboxes (ADGM RegLab, DFSA ITL) are explicitly structured as pathways to full licensing; others (EU DLT Pilot Regime) operate in parallel with full licensing requirements.
3. Can the same tokenised asset programme operate in multiple sandboxes simultaneously?
Yes and many institutional programmes do. The EU DLT Pilot Regime governs European infrastructure; ADGM FSRA governs GCC distribution; MAS governs Asian investor access. Each sandbox permission is specific to the jurisdiction and activity type. Operating in multiple sandboxes requires separate applications to each regulator; cross-sandbox coordination is the responsibility of the issuer and its compliance team, not the regulators.
4. What happens when a sandbox period ends?
Outcomes vary by sandbox. In the EU DLT Pilot Regime, the 2026 ESMA review will determine whether to extend the pilot, create a permanent DLT framework, or require participants to migrate to existing regulatory categories. In the UK DSS, the five-year window is explicitly designed to produce permanent framework recommendations. In the MAS and CBB sandboxes, participants who have demonstrated compliance are typically invited to apply for full licensing. The risk of regulatory uncertainty at sandbox end is a due diligence consideration for issuers and investors.
5. Does Blockmaze operate within any of these regulatory sandboxes?
Yes. Blockmaze holds eleven regulatory authorisations across eight jurisdictions recognised by Guinness World Records as the most financial regulatory licences held by a blockchain ecosystem at launch. These include CBB authorisation (Bahrain), ADGM FSRA registration (Abu Dhabi), VARA compliance (Dubai), and DFSA alignment (DIFC). For institutional issuers evaluating tokenised capital formation programmes, Blockmaze’s multi-jurisdiction licensing means the regulatory infrastructure is already operational across the sandboxes that matter most for GCC, European, and Asian institutional distribution.
6. What is the EU DLT Pilot Regime’s €6 billion threshold?
The €6 billion figure is the aggregate market value cap on DLT financial instruments recorded by a single DLT Market Infrastructure operator. It is not a cap on individual instrument size or on total EU market volume it applies per authorised operator. This threshold was designed to limit systemic risk during the pilot period while still accommodating institutional-scale programmes. The EIB’s tokenised bond programme, running at individual issuance sizes of €100 million–€500 million+, operates well within this threshold.
Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice. Readers should conduct their own research and consult with qualified professionals before making any investment or business decisions.