How does Tokensoft handle retail investor wallet management?

When an investor completes KYC and is approved for an offering, the platform generates a custody wallet automatically. The investor does not need to provide a wallet address or understand Ethereum. The wallet is provisioned, funded, and managed through the platform. Investors can optionally transition to self-custody when applicable holding periods expire.

What is the difference between client custody and self-custody for security tokens?

In Tokensoft's client custody model, the platform provisions and manages wallets on behalf of investors. Investors get a brokerage-style experience without managing private keys. In self-custody, the investor controls the private key directly. Tokensoft supports transition to self-custody when holding periods permit, enabling secondary market participation on ATSs and DeFi venues.

Does Tokensoft's client custody support white-labeling?

Yes. Each issuer gets a custom-branded investor portal at their own domain. Investors see the issuer's brand, not Tokensoft's. Each tenant's investor base is fully segmented — compliance administrators for one offering cannot access investor data from another.

Tokensoft Client Custody — Brokerage-Style Security Token Accounts for Retail Investors

Q: How many investors can Tokensoft onboard per hour?

Tokensoft's KYC and onboarding pipeline processed 80,000+ investor registrations per hour at peak — including accreditation verification, biometric identity checks via Onfido, OFAC and PEP screening, and wallet provisioning. The INX IPO onboarded 11,700 investors using this infrastructure.

TL;DR

Wallets provisioned automatically at KYC approval — investors never manage private keys
Brokerage-style interface: holdings, transaction history, distributions
ERC-1404 compliance enforced at the wallet layer before every transfer broadcast
80,000+ investors/hour onboarding throughput; $10M/hour capital throughput
11,700 investors onboarded for the INX IPO — first SEC-registered security token offering
White-labeled portals per issuer; fully segmented multi-tenant data architecture

Tokensoft's client custody platform is a retail investor platform for security tokens and digital assets. It gives investors a brokerage-style experience — holdings, transaction history, distributions — without requiring them to manage wallets, private keys, or any blockchain infrastructure. Underlying assets are held in the investor's own on-chain wallet, not an omnibus account, with ERC-1404 compliance enforced on every transfer.

The Custody Problem With Security Tokens

Security tokens are on-chain instruments. Moving them requires a wallet — a cryptographic key pair controlling an Ethereum address. Retail investors don't have wallets and shouldn't need to manage private keys to participate in a compliant securities offering.

The standard solution in 2017 was to hold tokens in an omnibus wallet and represent ownership in a database. This solved UX but undermined the on-chain compliance enforcement and transparency that make security tokens valuable. The alternative — requiring self-custody — introduced unacceptable operational risk: lost private keys mean permanently inaccessible assets, with no password recovery on Ethereum.

Tokensoft's client custody platform solves both problems simultaneously.

Architecture: Programmatic Wallet Provisioning

When an investor completes KYC, passes accreditation verification, and is approved for an offering, the platform generates a custody wallet automatically. The investor does not provide a wallet address. The issuer does not collect wallet addresses. The wallet exists from the moment the investor is onboarded.

Investors interact with a brokerage-style interface. The underlying infrastructure is on-chain. Tokens are in the investor's wallet — not an omnibus account. ERC-1404 compliance rules govern every transfer. The on-chain record is the authoritative cap table.

Key Capabilities

80,000+ Investors Per Hour

The KYC and onboarding pipeline — accreditation verification, biometric identity checks via Onfido, OFAC and PEP screening, jurisdictional eligibility, wallet provisioning — processes 80,000+ investor registrations per hour. The INX IPO onboarded 11,700 investors using this infrastructure. QueueIT (the same queuing system used by Ticketmaster) manages demand spikes. The platform stress-tests to 2,000 concurrent workers across the web application and GraphQL API independently.

Multi-Tenancy with Custom Branding

Each issuer gets a custom-branded investor portal at their own domain (e.g., invest.client.com). Investors see the issuer's brand, not Tokensoft's. Each tenant is fully segmented — compliance administrators for one offering cannot access investor data from another.

ERC-1404 Enforcement at the Wallet Layer

Because the platform controls the signing infrastructure for managed accounts, it enforces transfer restrictions at the point of execution. Transfers are routed through compliance checks before broadcast to the network. This closes the gap between on-chain enforcement and real-world investor behavior.

DeFi Interoperability and Self-Custody Transition

Investors can move assets from their managed account to a self-custody wallet when the applicable holding period and transfer restrictions permit. This enables secondary market participation on ATSs and DeFi venues.

Automated Distribution

Dividends, interest payments, and token distributions are processed directly to investor wallets. The platform calculates per-holder amounts, runs compliance checks, and executes on-chain transfers in a single automated workflow — replacing a manual, multi-day reconciliation process with a same-day operation.

Regulatory Framework

Tokensoft's custody of investor wallets is programmatic, not discretionary — the platform executes investor-directed transactions and issuer-directed distributions but does not exercise investment discretion. This distinction matters under the Investment Advisers Act and broker-dealer custody rules. The platform's onboarding and distribution workflows were reviewed and accepted by SEC staff in the ArCoin and INX registration processes.

Frequently Asked Questions

What is Tokensoft's client custody platform?

Tokensoft's client custody platform provisions Ethereum wallets for retail investors automatically at the point of KYC approval. Investors get a brokerage-style interface. Underlying assets are held in their own wallet — not an omnibus account — with ERC-1404 compliance enforced on every transfer.

Do investors need to manage their own wallets or private keys?

No. Tokensoft provisions wallets programmatically at onboarding. Investors never manage private keys or interact with Ethereum directly. They use a brokerage-style interface to view holdings, receive distributions, and track transactions.

How many investors can Tokensoft onboard per hour?

80,000+ investor registrations per hour at peak — covering KYC, accreditation verification, biometric identity checks via Onfido, OFAC/PEP screening, and wallet provisioning. The INX IPO onboarded 11,700 investors using this system.

Can investors trade their tokens on secondary markets?

Yes, when applicable holding periods and transfer restrictions permit. Investors can transition from managed custody to self-custody to participate on ATSs or DeFi venues. The ERC-1404 compliance rules govern whether any given transfer is permissible.

Does the platform support white-labeling for issuers?

Yes. Each issuer gets a custom-branded portal at their own domain. Investors see the issuer's brand. Tenant data is fully segmented.

Client custody is how Tokensoft brought compliant, on-chain security token ownership to retail investors at scale.

Last updated: April 10, 2026 · Tokensoft Inc. · Back to Blog

Tokensoft Client Custody: Brokerage-Style Security Token Accounts for Retail Investors