RWA Tokenization Explained: Process, Platforms and How to Build It

What RWA tokenization is, and what it isn't

A real-world asset (RWA) is anything that exists outside a blockchain: a government bond, a private loan, a building, a fund share, a bar of gold. Tokenization creates a digital token that represents a legal claim on that asset. The blockchain records who holds the token.

The asset never moves on-chain. A custodian holds the Treasury bills, a vault holds the gold, a special purpose vehicle (SPV, a legal entity created for one asset or deal) holds the building. The token is a pointer to that claim, so its value depends on the legal documents and the custodian, not on the code.

What tokenization adds:

• Faster settlement. A transfer between approved wallets can settle in minutes, at any hour, instead of in days through several intermediaries.
• Programmable rules. The token can refuse transfers to wallets that haven't passed KYC (know your customer) checks, enforce holding limits or freeze a stolen balance.
• Smaller units. Assets can be split into smaller pieces and held next to stablecoins in one wallet.

What it does not do: make an illiquid asset liquid by itself, remove the need for an issuer, custodian and transfer agent, or change the asset's legal status. A tokenized loan is still a loan, and a tokenized fund share is still a fund share.

Which assets get tokenized: real examples

Activity is concentrated where the asset is already standardized and easy to value. Cash-like funds came first, then private credit. Real estate gets the most headlines but is the hardest to run well.

The RWA tokenization process, step by step

Nine steps take an asset from a term sheet to a token investors can redeem. Steps 1 to 3 are legal and operational, and they usually take longer than the code.

1. Choose the legal wrapperDecide what the token legally represents: a fund share, a note, an LLC interest, a warehouse receipt. Usually an SPV or a fund holds the asset, so investors own a claim on the vehicle, and the asset is protected if the platform fails.
2. Pick the offering routeRegistered offering or an exemption (Reg D, Reg A, Reg S). The route decides who can buy, how you market and how long buyers must hold before reselling.
3. Set up custody and the record keeperA qualified custodian or vault holds the underlying asset. A transfer agent, the firm that keeps the official register of who owns a security, decides whether the blockchain is the register itself or a mirror of an off-chain one.
4. Choose the chain and token standardPlain ERC-20 tokens can be sent to anyone, which doesn't work for most securities. Permissioned standards such as ERC-3643, finalized as an Ethereum standard, check every transfer against an identity registry and a compliance contract. Tokens can also be frozen, force-transferred by an agent, or recovered to a new wallet if an investor loses keys.
5. Onboard investors and whitelist walletsKYC, AML (anti-money laundering) and sanctions screening, plus accreditation or qualified purchaser checks if the exemption requires them. Each approved investor's wallet goes on the whitelist with attributes such as country and investor type.
6. Issue the tokensThe investor pays in dollars or a stablecoin. Once funds clear and the asset is bought or allocated, the contract mints tokens to the approved wallet and the transfer agent updates the register.
7. Enforce transfer restrictionsThe contract blocks transfers to unapproved wallets, enforces holding periods and investor limits by country or type, and can pause in an emergency. They must mirror the offering documents.
8. Keep price and reserves currentNAV for funds, appraisals for real estate, reserve reports for commodities. Data reaches the chain through an oracle (a service that publishes off-chain data on-chain) or through the issuer's own signed updates, so apps and lenders can price the token.
9. Plan secondary trading and redemptionSecondary trades of securities go through registered venues or brokers, or stay peer-to-peer between whitelisted holders. Redemption burns the tokens and pays out cash or the asset, within the windows and limits the documents allow.

US securities law basics for RWA tokens

The starting point is simple: if the asset would be a security on paper, it is a security as a token. On January 28, 2026, staff of three SEC divisions (Corporation Finance, Investment Management, and Trading and Markets) published a statement on tokenized securities. It says the format of a security, on-chain or off-chain, does not affect how the federal securities laws apply. It is a staff view, not a Commission rule.

The statement splits tokenized securities into two families:

• Issuer-sponsored. The issuer or its agent tokenizes its own security. The blockchain can be part of the official holder file, or the token can trigger updates to an off-chain register.
• Third-party. Someone else wraps an existing security. In the custodial model the third party holds the security and issues a token representing it. In the synthetic model it issues its own instrument that tracks the security. The staff notes that holders of a third-party token can be exposed to risks tied to that third party, such as its bankruptcy, and that synthetic products can be linked securities or security-based swaps.

Most private RWA offerings rely on an exemption from registration. The common routes, according to the SEC's guidance for small businesses:

Securities bought in private offerings are usually "restricted". Under Rule 144, holders generally wait six months or one year before reselling, depending on whether the issuer files reports with the SEC. A token that can be sent anywhere on day one breaks that, which is why permissioned standards exist.

Three more pieces that shape the build:

• Transfer agents and broker-dealers. Someone must keep the official ownership record, and selling securities to investors usually involves a registered broker-dealer. Secondary trading needs a registered venue, such as an alternative trading system (ATS), or stays peer-to-peer between approved holders.
• The SEC's Innovation Exemption. On September 17, 2026, the SEC issued a temporary exemptive order letting tokenized NMS stock (shares of exchange-listed companies) trade through permissioned automated market maker pools on tokenized securities venues, under conditions: limits on the number of symbols and volume, the same rights as the traditional share, written notice to the issuer with a chance to object before third-party tokens trade, and public, auditable smart contracts on a public permissionless ledger. The exemptions expire five years after publication. It covers listed stocks, not RWA funds or real estate.
• Separate crypto rules. Regulation Crypto Assets, proposed by the SEC on August 18, 2026 and still a proposal as of October 2026, would create offering exemptions and a safe harbor for crypto assets sold as part of investment contracts; it is a separate track from tokenized securities. On October 1, 2026, the SEC also proposed rules on how investment advisers and registered funds can custody crypto assets. Payment stablecoins, often used to subscribe and redeem, have their own federal law, the GENIUS Act, signed on July 18, 2025.

Built by Gilzor

Results we’ve shipped

70+products launched

98%delivered on time

85%clients come back

Aviation33%faster baggage weigh-inWeb and Mobile application for Airlines→Healthcare+30%lab test ordersMedical Lab Web and Native Mobile Applications→Retail · Startup700+stores aggregatedMobile application for Grocery shops→

Talk to the people who build it. Tell us about your project and get a free estimate of scope, timeline and cost.

See how we’d approach yours →

Tokenization platforms vs custom development

RWA tokenization services come in two shapes: platforms that bundle the regulated roles with the technology, and development teams that build or extend the software. Most issuers combine both.

Two examples of platforms, from their own materials:

• Securitize has US affiliates that are an SEC-registered transfer agent and a broker-dealer operating an ATS, according to its 2026 SEC filings. It tokenized BUIDL and ACRED, and its parent began trading on the NYSE in July 2026.
• Tokeny created the T-REX protocol that became ERC-3643 and offers a tokenization platform built on it. Apex Group, a fund administrator, acquired a majority stake in 2025.

Other platforms and fund administrators offer similar packages. Compare regulated roles in your market, supported chains, redemption mechanics, fees and how easily you can leave.

Build more yourself when you plan many issuances, need a branded investor product, or the platform doesn't support your asset or chain. Rent more for a first issuance. If the investor app will hold tokens and stablecoins together, our crypto wallet development cost guide covers the custody options, and the stablecoin payments integration guide covers subscriptions and payouts in stablecoins.

Risks to plan for

• The legal link breaks. If the documents don't clearly tie the token to the asset, holders may own a token and not the claim. Bankruptcy-remote SPVs and clear terms on what happens if the platform fails are the fix.
• Liquidity mismatch. Tokens move 24/7, but loans and buildings don't. Promising instant redemption on an asset that sells in months is the classic failure. Match redemption terms to the asset.
• Stale or wrong prices. If NAV updates late or an oracle fails, lenders that accept the token as collateral can be hurt. Add staleness checks and publish the update schedule.
• Smart contract and key risk. Agent roles that can mint, freeze or force-transfer tokens are powerful. Put them behind multisig wallets, log every use and audit the contracts.
• Regulatory change. Keep transfer rules configurable, so a rule change doesn't need a new token.

Readiness checklist for a first issuance

Tick what is already decided. It shows how close you are to minting the first token.

FAQ

Where Gilzor fits

A tokenization platform covers the regulated roles. The product around it is software work: the investor app, onboarding flows, integrations with your fund administrator, bank and accounting, reporting and monitoring. That is what our Web3 development team builds, together with smart contract development for custom compliance modules and the API and backend work that keeps the chain and your records in sync. In crypto, we refactored the architecture of the KickEX exchange app and rewrote unstable code so users could trade, transfer and withdraw reliably. We are based in Poland and Cyprus, with a few shared working hours a day with the US East Coast.

Tell us the asset, the investors you want to reach and the platform you are considering. We'll help you decide what to rent, what to build and how the pieces connect. For the wider build budget, see our blockchain app development cost guide.