2026-10-08
[gif] Valentina hero — cid:valentina-gif (auto-attached at send)
What Is a Digital Asset Service Provider License?
A digital asset service provider license is a government authorization that lets a company custody, exchange, issue, or transfer digital assets on behalf of the public. Where banks hold money under a banking charter, and broker-dealers handle securities under a securities license, a digital asset service provider — often abbreviated DASP — holds, moves, and trades tokenized value under its own distinct regulatory regime.
The category is new. The need is old. Whenever the public's assets sit in someone else's hands, a regulator's job is to make sure those hands are watched, audited, and accountable.
What the license actually authorizes
Licensed providers perform functions that would be illegal — or at best unregulated — without the authorization. The exact permitted activities vary by jurisdiction, but the pattern is consistent:
- Custody. Holding digital assets for clients, with segregated wallets, audited controls, and defined recovery procedures.
- Exchange. Operating an order book or trading venue where one digital asset converts into another, or into fiat currency.
- Issuance support. Assisting in the creation and distribution of tokens under defined disclosure rules.
- Transfer and settlement. Moving assets between parties with recorded, traceable finality.
- Brokerage. Executing trades on behalf of clients.
In most regimes, a provider must declare which activities it will conduct and is licensed only for those. A custody-only license does not authorize running an exchange. The scope is written into the authorization, and stepping outside it is a violation.
Why regulators built the category
The early years of digital assets ran on a simple premise: code replaces institutions. Practice taught a harder lesson. Exchanges collapsed with customer funds frozen. Issuers vanished. Wallets with millions in client assets turned out to be one laptop with no backup.
Regulators responded the way they always do when public money is at stake: they created a licensing perimeter. Inside the perimeter, providers submit to fitness tests for directors, minimum capital, segregated client funds, audited financials, anti-money-laundering controls, and reporting obligations. Outside it, they cannot legally operate.
The license is not a stamp of investment quality. It is a statement about the operator: this company has been examined, it holds capital against its risks, it keeps client assets separate from its own, and it answers to an authority that can revoke its permission to operate. That distinction matters. A license tells you the plumbing is inspected. It tells you nothing about whether any particular asset will perform.
What a licensed provider must do, day to day
The obligations of a licensed provider are operational, not theoretical. A serious regime typically requires:
- Know-your-customer and anti-money-laundering programs. Every client identified, every transaction screened, suspicious activity reported.
- Segregation of assets. Client funds held apart from company funds, so a corporate failure does not become a client loss.
- Capital adequacy. Minimum reserves that keep the lights on and claims payable even under stress.
- Governance standards. Fit and proper directors, documented policies, internal controls that auditors can actually test.
- Periodic reporting. Financial statements, activity volumes, and incident disclosures filed with the regulator on schedule.
- Cybersecurity and custody standards. Key management, access controls, and recovery plans that survive the departure of any single employee.
These are the same disciplines that govern banks and brokerages, translated into the mechanics of wallets, keys, and smart contracts. The vocabulary changes. The duty does not.
The El Salvador model
Different jurisdictions have answered the same question in different ways. The European Union built a pan-regional framework. Several island jurisdictions competed early with light-touch regimes. El Salvador took a distinctive path: a dedicated law for digital assets, the Ley de Emisión de Activos Digitales, and a dedicated regulator, the Comisión Nacional de Activos Digitales — CNAD — to administer it.
Under this framework, companies that want to issue or service digital assets for the public apply for registration as digital asset service providers. The process examines the business model, the people behind it, the custody and compliance architecture, and the disclosures offered to the public. The regulator's posture is explicitly developmental: the law was written to make licensed digital-asset business possible, not to make it impossible.
For companies building tokenized real assets — resorts, equity interests in operating properties, structures where the token represents a defined economic right — the distinction is decisive. A license means issuance, custody, and secondary-market activity happen inside a defined legal frame, with a regulator that understands what a tokenized equity interest is supposed to be. It replaces improvisation with procedure.
What a license does not promise
Clarity about what licensing delivers requires equal clarity about what it does not. A digital asset service provider license is not:
- An investment guarantee. No regulator endorses the economics of any asset. The license governs the operator, not the outcome.
- A global passport. A license issued in one jurisdiction authorizes activity there. Other countries apply their own rules, their own geo-blocking expectations, their own licensing demands.
- A substitute for disclosure. Licensed issuers still owe the public honest, complete descriptions of what is being offered, what the risks are, and what the holder's rights actually are.
- A finished process. Licensing is the beginning of supervision, not the end of it. Regulators audit, inspect, and enforce continuously.
Anyone evaluating a tokenized offering should treat the license as necessary but not sufficient. It answers the question "is this operator supervised?" It leaves open every question about the asset itself — what it is, what backs it, who values it, and how a holder exits.
How Embodier approaches licensing
Embodier is a real estate token exchange. We acquire luxury resorts and offer tokenized ownership equity in them. Because we operate at the intersection of real assets and digital instruments, licensing is not a marketing line for us — it is the operating frame everything else hangs on.
Our path runs through El Salvador's CNAD framework, the venue chosen for its explicit digital-asset law and a regulator built for exactly this kind of business. Exchange listing follows once the properties are developed, the token stack is final, smart contracts are hardened, and exchange approval is granted. That sequence is deliberate. The license gates Exchange listing follows once the properties are developed, the token stack is final, smart contracts are hardened, and exchange approval is granted., public issuance, and any secondary market. Until each gate clears, we work in the open, in order: education, a public waitlist, and soft commitments from people who want to be first in line when the structure is ready.
That discipline — license first, market second — is the quiet difference between a serious tokenized-asset business and a coin with a story. Not a coin. Not ayahuasca theater. A supervised venue for real ownership in real resorts, built step by step, with the regulator's framework around every step that touches the public.
What to do next
If you are following the tokenization of real assets, the waitlist is where the conversation starts. You may apply to join, follow the licensing progress as it unfolds, and be positioned for the moment projects are offered. When projects are offered, you may apply — no deposit is taken; your place in line comes from the register, in the order you joined.
Identity verification comes before any allocation. The details live at www.embodier.ai, and you can reach us at espen@embodier.ai.
Stay. Own. Return.