Regulatory Sandbox

A regulatory sandbox is a structured framework established by a financial regulator allowing firms to test innovative products, services, or business models in a live market environment under regulatory supervision, with a defined set of regulatory waivers, exemptions, or relaxations. Sandboxes provide legal certainty for genuinely novel activities that do not fit cleanly within existing regulatory categories — preventing innovators from facing enforcement action for activities that may be compliant in intent but technically unlicensed in form.

In tokenization, sandboxes have been particularly important because the combination of DLT infrastructure and traditional financial instruments often requires regulatory waivers — for example, waivers of paper instrument requirements, approval of new settlement models, or temporary exemptions from CSD monopoly rules — that existing law cannot accommodate without legislative change.

Purpose and Design

Regulatory sandboxes typically offer:

• Limited exemptions: Waivers from specific regulatory requirements that would otherwise prevent the product from operating
• Consumer limits: Caps on the number of customers or transaction value to limit systemic risk during testing
• Time limits: Fixed duration (typically 12–36 months) after which the firm must either exit, apply for a full licence, or demonstrate that no licence is needed
• Close supervision: Enhanced regulatory engagement, including regular reporting and co-design of safeguards with the regulator
• No-enforcement comfort: Assurance that the regulator will not take enforcement action for activities within the sandbox scope

Major Tokenization Sandboxes

UK Digital Securities Sandbox (DSS): Established under the Financial Services and Markets Act 2023 and launched in 2024, the DSS allows UK financial market infrastructure firms to issue, trade, and settle digital securities within a supervised environment. Operated jointly by the FCA and Bank of England, the DSS permits firms to perform CSD and trading functions for DLT-based securities without holding the normally required full authorisation — a direct response to the EU DLT Pilot Regime. The DSS has no volume caps equivalent to the EU regime, making it potentially more accommodating for larger issuances.

EU DLT Pilot Regime: Regulation 2022/858, applicable from March 2023, is the EU’s six-year regulatory sandbox for tokenized securities market infrastructure. It permits DLT Market Infrastructures (DLT MTFs, DLT Settlement Systems, DLT TSS) to operate with regulatory waivers from specific provisions of MiFID II, the Central Securities Depositories Regulation (CSDR), and related legislation. The Pilot imposes caps: €6 billion aggregate market capitalisation per infrastructure and €500 million per eligible financial instrument. The Pilot is reviewed by ESMA and the European Commission and may be extended, made permanent, or wound down by March 2029.

MAS Fintech Regulatory Sandbox (Singapore): Established 2016 by the Monetary Authority of Singapore, the MAS sandbox has hosted several tokenization experiments including Project Guardian — a major institutional DeFi initiative involving JPMorgan, DBS Bank, Marketnode, and the MAS itself, testing tokenized bonds and bilateral repo using DeFi protocols on public blockchains. MAS has also introduced a Sandbox Express for lower-risk activities, providing faster-track sandbox entry with a 9-month standard timeline.

ADGM RegLab (Abu Dhabi): The Abu Dhabi Global Market’s Financial Services Regulatory Authority (FSRA) operates the RegLab, one of the longest-established fintech sandboxes in the Gulf. The RegLab has hosted digital securities issuances, tokenized fund structures, and VASP pilots. Successful RegLab graduates include several entities that subsequently obtained full FSRA authorisation.

HKMA Fintech Supervisory Sandbox: The Hong Kong Monetary Authority’s sandbox enables banks and payment system operators to conduct limited pilots of technology applications including DLT-based settlement and tokenized deposits. Project Evergreen — HKMA’s tokenized green bond issuance — used sandbox infrastructure to conduct DvP settlement on DLT.

Eligibility Criteria

While criteria vary by jurisdiction, common sandbox eligibility requirements include:

• Genuine innovation: The product or service must be genuinely novel — not merely an existing product delivered through technology
• Consumer benefit: A demonstrable benefit to consumers or market efficiency
• Regulatory need: A specific regulatory barrier that prevents full deployment without the sandbox
• Regulatory compliance intent: The applicant must intend to seek full authorisation if the pilot succeeds
• Risk management: Adequate safeguards for consumers and market stability during the trial

Duration and Post-Sandbox Path

Sandbox periods typically run 12–24 months (EU DLT Pilot: up to 6 years). At the end of the sandbox period, firms must either: obtain full regulatory authorisation, restructure their product to fit within existing regulations without waivers, or exit the relevant market. Regulators use sandbox learnings to inform permanent rule changes.

Related entries: DLT Act (Swiss), MiCA, Atomic Settlement (DvP)

Primary sources: EU DLT Pilot Regime — ESMA | MAS Fintech Sandbox | BIS on Regulatory Sandboxes