Trust & Compliance

Built for
regulated markets.

Stobox has operated in regulated digital-asset markets since 2018. Every engagement is structured around licensed infrastructure, independent legal counsel, and institutional custody — so token programs stand up to regulatory scrutiny from day one.

8+
Years operating
100+
Client engagements
40+
Jurisdictions
$500M+
Assets tokenized
Scope of service

What Stobox is.
And what it isn't.

Clarity on scope is the foundation of a regulated engagement. Stobox provides the services listed on the left and does not provide the services listed on the right. Licensed third parties cover everything else.

Stobox does
  • Engagement management — end-to-end coordination of the 7-stage tokenization program
  • Financial architecture — token economics, capital structure, investor return modeling
  • Legal coordination — managing independent external counsel through to delivery
  • Compliance architecture — KYC/AML design, transfer restriction rules, investor eligibility matrices
  • Technology platform — STV3 smart contract protocol and Stobox 4 platform deployment
  • Distribution introductions — warm introductions to FINRA broker-dealers and ATS partners
  • Post-launch operational support — platform hosting, compliance monitoring, infrastructure
×
Stobox does not
  • Broker-dealer services — token offerings are structured and distributed by licensed broker-dealers
  • Legal advice — legal structuring is delivered by independent third-party counsel
  • Investment advice — Stobox does not advise on investment suitability, selection, or allocation
  • Fund management — Stobox does not manage client assets or investor funds
  • Custody of funds or securities — digital asset custody is handled by Fireblocks under separate agreement
  • Solicitation of securities — Stobox does not solicit, offer, or sell securities on its own account
  • Secondary market transactions — Stobox takes no part in secondary trading of client tokens
Jurisdictional frameworks

We work within the rules
of each market we touch.

Every Stobox engagement is structured around the regulatory regime applicable to the asset, issuer, and investor base. Common frameworks below — additional jurisdictions are assessed during the Pre-Qualification Audit.

🇺🇸
United States
  • SEC Regulation D (506(b) and 506(c))
  • SEC Regulation S (non-US investors)
  • FINRA broker-dealer network: tZERO, Entoro, Silicon Prairie
  • Delaware and BVI entities for US offerings
🇪🇺
European Union
  • MiCA (Markets in Crypto-Assets Regulation) compliance layer
  • Assetera EU-regulated exchange distribution
  • GDPR data protection applied across all processing
  • Cyprus, Luxembourg, Ireland entity structures
🌍
Global & emerging
  • MENA: ADGM, DIFC, QFC frameworks (UAE, Qatar, Bahrain)
  • Asia-Pacific: Mauritius CAT III, Singapore structures
  • LATAM and Africa: case-by-case jurisdictional strategy
  • Cross-border compliance mapped during Stage 2

Stobox itself is not a licensed broker-dealer, fund manager, or investment adviser in any jurisdiction. Regulated activity within each program is carried out by the appropriate licensed counterparty — broker-dealers, legal counsel, custodians, and exchanges.

Institutional infrastructure

The licensed counterparties
behind every engagement.

Stobox integrates institutional-grade partners for custody, identity, distribution, and settlement. Each relationship is established and contractual — not directory-listed. Client programs inherit these integrations on day one.

Custody
Fireblocks
SOC 2 Type II · ISO 27001

Institutional MPC custody. Wallet policies, transaction approvals, and settlement infrastructure run under a direct Fireblocks enterprise agreement per client.

KYC / AML
Sumsub
Biometric · Sanctions screening

Identity verification, document review, biometric checks, and global sanctions lists. KYC results feed the Stobox DID identity layer and on-chain eligibility rules.

Data oracles
Chainlink
Industry-standard oracle network

Price feeds, proof-of-reserves, and external data attestations. Used for automated on-chain distributions and asset-backed token validation.

US distribution
tZERO · Entoro · Silicon Prairie
FINRA registered broker-dealers

Warm introductions to FINRA broker-dealer partners for US Regulation D and Regulation S offerings. Each introduction inherits Stobox's existing BD relationships.

EU distribution
Assetera
EU-regulated exchange · MiCA-aligned

EU-regulated digital asset exchange for European token distribution and listing. Covered under the MiCA compliance layer in the Stobox engagement.

Legal counsel network
DAO Lawyers · Neos Legal · Rasma Legal
Independent external counsel

All legal work is executed by independent law firms under direct engagement. Stobox coordinates but does not provide legal advice.

On-chain transparency

Public infrastructure.
Verifiable activity.

Stobox-deployed token programs run on public blockchains with transparent data. Compliance rules are enforced on-chain, not through opaque off-chain processes.

Blockchain

Arbitrum One mainnet

STV3 smart contract protocol deployed on Arbitrum One, an Ethereum Layer 2 with public block explorers and open verification. Compliance rules, transfer restrictions, and distribution logic are enforced on-chain automatically.

Public data

Stobox Dune Dashboard

Full asset and activity data for Stobox-deployed programs is publicly available on Dune Analytics — no login, no gate. Anyone can query token holders, transfers, distributions, and aggregate TVL.

View Dune dashboard →
Smart contract audits

Independently audited

The STV3 protocol has been independently audited. Audit reports are available under NDA to institutional counterparties and qualified reviewers as part of a commercial engagement.

Request audit report →
Custody verification

Fireblocks wallet attestation

Client program custody is provided via Fireblocks MPC. Wallet addresses and policy configuration can be attested to directly by Fireblocks under the client's enterprise agreement.

Registered entities

Who you contract with.

The Stobox group operates through distinct registered entities. Engagements are contracted with the relevant entity depending on the jurisdiction and scope of service.

🇺🇸
United States
Stobox Technologies Inc.
Incorporated in the United States of America. Engagements with US issuers and clients.
🇻🇬
British Virgin Islands
Stobox Innovation Ltd.
BVI registered entity. Technology and product operations.
🇻🇬
British Virgin Islands
Stobox Tokenized Ltd.
BVI registered entity. Tokenization services and issuance infrastructure.
Data & privacy

Client data is handled
under formal frameworks.

GDPR applied globally

Stobox applies GDPR-level data protection standards to all client and investor data, regardless of jurisdiction. Data minimisation, purpose limitation, and retention policies are documented per engagement.

KYC data handled by Sumsub

Identity verification data (documents, biometrics, sanctions results) is collected and stored by Sumsub under its own regulatory framework. Stobox receives verification status, not raw KYC documents.

Stobox DID — user-owned identity

The Stobox Decentralized Identity (DID) layer gives investors a portable identity credential they control. On-chain eligibility is checked against the DID without exposing personal data on-chain.

Privacy Notice

Detailed information on data collection, processing, sharing, and user rights is available in the Privacy Notice. Data protection inquiries can be sent to privacy@stobox.io.

Track record

Eight years of
documented engagements.

Stobox has run 100+ client tokenization engagements across 40+ jurisdictions since 2018. The full portfolio is documented in the case study archive — every client, every jurisdiction, every service type.

Browse case studies →

Have questions about
our regulatory position?

Every engagement begins with a Pre-Qualification Audit — a written verdict on your asset, structure, and investor feasibility. $9,500. 5–7 days. Credited on Go.

Start the conversation See full pricing
Legal Disclaimer

Stobox Companies Group is not a registered broker-dealer, funding portal, underwriter, investment bank, investment adviser, or investment manager, and does not provide brokerage, underwriting, or investment advice. Stobox is not a law firm and does not provide legal advice — legal structuring is delivered by independent third-party counsel.

Stobox does not solicit, offer, or sell securities. Token offerings are structured and distributed by licensed broker-dealers. Stobox takes no part in secondary market transactions and does not hold investor funds or securities. Digital asset custody is provided by Fireblocks under separate agreement.

Nothing on this website constitutes an offer to sell, solicitation to buy, or recommendation of any security or investment. All information is for informational purposes only. Past performance is not indicative of future results. Investing in tokenized securities involves substantial risk, including loss of principal.

Tokenize My Asset