Skip to main content
Request a demo
Physical assets

Physical Asset Tokenization

The general case for assets that exist in the world: custody, attestation, insurance and the gap between the register and the object.

Standards, ordered by control over a transferFour token standards as rungs, from one where anyone may hold up to one where a transfer can be refused by the contract itself.ERC-20anyone may holdERC-1155batched, still openERC-4626a vault around oneERC-3643a transfer can be refused

Definition

Physical asset tokenization covers any instrument whose underlying is a tangible object — machinery, inventory, vehicles, equipment, luxury goods. The shared problem is that the chain cannot observe the object, so every guarantee reduces to somebody trustworthy asserting that it exists, is in the stated condition, and is not pledged elsewhere.

What it solves

  1. Capital locked in equipmentOwners of valuable physical assets often cannot finance against them without selling.
  2. Fractional ownership of indivisible thingsA machine cannot be split; a claim on the vehicle owning it can.
  3. Provenance and pledge trackingA single register makes it visible whether an asset is already encumbered.

How it works

  1. The asset is identified and inspectedSerial numbers, condition report, independent valuation.
  2. A vehicle takes ownershipTitle transfers to an entity that can issue claims.
  3. Units are issuedAgainst the appraised value, with the appraisal disclosed.
  4. Condition is maintained and verifiedInsurance, maintenance and periodic re-inspection.

Architecture

A custody or possession arrangement, an inspection and attestation cadence, an insurance policy naming the vehicle, and a register whose positions reflect the vehicle’s equity rather than the object itself.

How the platform is arrangedFour stages — asset, compliance, offering and register — connected left to right, all enclosed by a single transaction boundary that rests on a double-entry ledger.AssetStructured and documentedCompliancePolicy in forceOfferingA book that is derivedRegisterHolders of recordOne transaction boundaryA movement and the entries behind it commit together, or neither doesDouble-entry ledgerEvery movement, both sides, in minor unitsBalanced at COMMIT
Four stages inside one transaction boundary, on one ledger. A register that disagrees with the cash is not a state the software can reach.

Tokenization lifecycle

  1. Identify and appraiseAsset documented, valued and insured.
  2. Transfer and issueVehicle takes title; units are issued.
  3. MaintainServicing, storage and re-inspection.
  4. RealiseSale or lease income distributed.
  5. RetireDisposal; units retired against final proceeds.

Supported token model

Permissioned fungible token over a single-asset vehicle. Holders own equal interests in one vehicle, so units are fungible among themselves. Two different objects are two different vehicles and two different series — pooling unlike objects hides exactly the risk a holder needs to see.

Asset requirements

What must be true before this can responsibly be tokenized at all.

  • Unambiguous identification: serial numbers, registration, or equivalent.
  • Documented title, free of undisclosed encumbrance.
  • An independent appraisal with a stated method.
  • Insurance at replacement value, naming the vehicle.
  • A custody or possession arrangement, and a maintenance plan.

Compliance considerations

  • Asset-specific registration regimes apply — vehicles, aircraft, vessels each have their own.
  • Import, export and sanctions controls may apply to the object itself.
  • The offering remains a securities question independent of the object’s own regime.
A compliance policy as ordered rulesRules are evaluated in sequence and the first match decides. A subject matching no rule is denied, and a fact the platform does not know never satisfies a rule.Subjectan investor's facts#1Screening hit is openreject#2Country in the blocked listreject#3Professional or institutional, verifiedallowMatched no ruledenyFirst matchdecides. A laterallow cannot undoan earlier reject.Eligibility comesfrom a rule saying so.
Rules are data, evaluated in sequence, and the first match decides. A subject matching nothing is denied — eligibility comes from a rule saying so, never from no rule objecting.

Investor workflow

  • Verify and review the appraisal, condition report and insurance.
  • Subscribe and fund by reference.
  • Hold; receive income where the asset generates it.
  • Exit on disposal, or transfer where permitted.

Issuer workflow

  • Document, appraise and insure the asset.
  • Form the vehicle and transfer title.
  • Issue units against the appraised value.
  • Maintain, re-inspect and report.
  • Dispose and distribute proceeds.

Payments

Where the asset produces income — lease or charter — it funds a distribution pool. Otherwise the only cashflows are the initial subscription and the final disposal, and holders should be told that plainly.

The payment railMoney is matched to a subscription by its reference and no other attribute, then screened and settled. Provider adapters for card and crypto rails are not built, and are drawn as an absent component.ReferencechecksummedFunds arrivebank or custodyReconcilereference or nothingScreenAMLSettlesecond authoriserSuspense (2900)unidentified, and visibleNo reference matchProvider adaptersCard, local rail, stablecoinNot built — the registry ships empty
A reference is the only thing that matches money to a payment. Everything else is an exception for a person, and unidentified credits post to suspense where they stay visible.

Lifecycle servicing

Maintenance and insurance are the recurring obligations, and both cost money that reduces holder returns. Deferred maintenance is a real and common way value is quietly lost.

How a distribution is splitA funded pool is divided among holders of record as at the record date using largest-remainder allocation, then withholding is deducted from each holder's gross rather than from the pool.Funded poolone exact amountRegister as atthe record dateRebuilt from confirmedmovements, not today’sbalancesNet to the holderWithheld, from that holder’s grossThe lines sum to exactly what was fundedLargest-remainder allocation, so no minor unit is created or lost. Rounding each slice independently leaves the issuer a few units out every cycle.There is no per-jurisdiction withholding matrix in this build — one rate is entered per run.
Holders of record as at the record date, split by largest remainder so the lines sum exactly, with withholding taken from each holder’s gross rather than off the top of the pool.

Secondary transfer

Transfers are permitted subject to eligibility, but the buyer base for a fractional interest in a specific object is small. Liquidity should be assumed to be poor.

The transfer gateA transfer request passes through eight compliance checks. Any single failure refuses the transfer; the same gate is evaluated off-chain and on-chain.Senderholds unitscanTransfer( )Sender holds the unitsNeither party frozenLockup expiredRecipient eligible under policyJurisdiction permittedInvestor type permittedHolding limit not breachedSanctions screening clearRecipientunits move, or none doOne implementation. The Solidity module and the register evaluate the same rules.
One implementation of the gate, not two. The function the register calls is the same one that mirrors the Solidity compliance module check for check, so an off-chain gate and an on-chain gate cannot drift.

Risks

Named plainly. An instrument whose risks are only in a footnote has been mis-sold before it has been issued.

  1. The object can be moved, damaged or lostUnlike a financial claim, physical assets have a location and a condition, and both can change adversely.
  2. Attestation gapNobody verifies continuously. Between inspections, the register asserts rather than knows.
  3. DepreciationMost physical assets lose value with age and use. Only a few appreciate.
  4. Undisclosed encumbranceAn asset already pledged elsewhere may not be the vehicle’s to give.
  5. ConcentrationOne object is one risk with no diversification.

How we support it

  • Asset templates covering the physical and luxury classes, each carrying its own readiness requirements.
  • Document data room with content-hashed versions, so the appraisal an investor read is the appraisal that was filed.
  • Attestation records tied to an attestor and a date rather than to an unattributed claim.

Questions

Who physically holds the asset?

A custodian, a storage provider or an operator named in the offering document. Holders never take possession.

What if it is damaged?

Insurance should respond. The policy, its limits and its exclusions are part of the disclosure for exactly this reason.

How do I know it still exists?

Periodic independent inspection, published. Between inspections you are relying on the custodian, which is why the custodian’s identity matters.

Next steps

Bring an instrument you are actually considering. Structuring something real is the only way to judge whether the model fits.

Request Enterprise DemoAll tokenization topics