Canton Network: The Institutional Blockchain for Financial Markets

Overview

The Canton Network is a blockchain network developed by Digital Asset — the enterprise blockchain company founded by Blythe Masters in 2014 and now led by Yuval Rooz — that connects permissioned institutional applications using DAML (Digital Asset Modeling Language) smart contracts. Unlike most blockchain networks, Canton is not a single shared ledger; it is an interoperability protocol that allows separate permissioned ledger instances to transact with each other while preserving each instance’s data privacy and governance autonomy.

The Canton Network’s institutional participant base includes Goldman Sachs, BNY Mellon, Cboe, Deutsche Börse, Microsoft, Broadridge, and more than twenty other financial institutions and technology companies. These participants operate Canton-connected applications for use cases spanning fund tokenization, derivatives lifecycle management, repo, and margin management — use cases that require the specific combination of privacy (counterparty data cannot be shared with unrelated parties), interoperability (transactions between institutions require shared state), and programmability (complex financial workflows require smart contract execution).

DAML: The Smart Contract Language for Financial Markets

DAML (Digital Asset Modeling Language) is a purpose-built smart contract language for financial applications. Unlike Ethereum’s Solidity — a general-purpose language that requires careful security auditing to prevent exploits — DAML is designed from the ground up with financial contract semantics: it natively models parties, obligations, choices, and workflows in terms that align with how financial contracts are actually structured.

DAML’s key design features include: mandatory party authorization (every action on a contract requires the authorized parties to consent, preventing unauthorized state changes), privacy by default (parties see only the contracts they are party to, not all transactions on the network), and deterministic execution (DAML contracts execute identically regardless of which infrastructure they run on, enabling portability across Canton, Hyperledger Fabric, and other supported runtimes).

For compliance purposes, DAML’s authorization model is significant: the code that governs a financial contract explicitly models who has the right to take which action, making the compliance logic auditable in the contract code itself. A DAML model of a derivatives agreement can encode ISDA Master Agreement concepts — termination events, close-out netting, margin calls — in a form that executes programmatically, reducing manual operational steps and the associated operational risk.

Privacy-Preserving Interoperability: The Canton Architecture

Canton’s core technical innovation is its sub-transaction privacy model. In most distributed ledger systems, achieving interoperability requires sharing transaction data with all network participants — which violates the confidentiality requirements of financial transactions. Canton addresses this through a cryptographic privacy model where each participant sees only the parts of a transaction that they are party to, while still being able to verify the validity of the transaction as a whole.

A Canton transaction involving two institutions — say, a fund manager and a custodian — is visible in full to both parties but not to other Canton participants. A three-party transaction (fund manager, custodian, and a derivatives counterparty) is visible to all three in the parts relevant to each party’s obligations, but the full transaction detail is not broadcast to unrelated network participants.

This privacy architecture is what allows institutions with strict data confidentiality obligations — banks subject to client confidentiality laws, funds with portfolio confidentiality requirements — to participate in a shared network without violating those obligations.

Goldman Sachs and Fund Tokenization

Goldman Sachs’ participation in Canton has focused on fund tokenization through the Goldman Sachs Digital Assets (GSDA) platform. The GSDA tokenization offering uses DAML smart contracts to represent fund interests — specifically, private equity and hedge fund shares — as Canton-connected tokens that can be settled through shared Canton infrastructure without routing through traditional transfer agent systems.

The Canton architecture allows Goldman Sachs to maintain a proprietary Canton ledger instance for its fund operations while connecting to other Canton participants (custodians, secondary market venues, other banks) through Canton’s interoperability protocol. This means Goldman’s fund data remains within Goldman’s controlled infrastructure, but settlement and transfer of fund tokens can occur with external counterparties through Canton’s shared state mechanism.

BNY Mellon and Custody Integration

BNY Mellon — the world’s largest custodian by assets under custody — has integrated Canton into its digital asset custody infrastructure, enabling the settlement of Canton-native tokens directly into BNY Mellon custody accounts. This integration is operationally critical for institutional tokenization: if the custodian can natively settle and hold Canton tokens without requiring a separate specialist digital asset custodian, the operational complexity of institutional tokenization adoption is materially reduced.

BNY Mellon’s Canton integration also enables the synchronization of traditional custody records with Canton ledger state — a capability relevant to institutional investors whose investment accounting and regulatory reporting systems are built around custodian-provided position data rather than blockchain ledger queries.

Cboe, Deutsche Börse, and Market Infrastructure

Cboe’s Canton participation focuses on derivatives — specifically, the use of Canton’s DAML contracts to manage the lifecycle of OTC and listed derivatives from trade confirmation through margin, variation margin calls, and final settlement. Deutsche Börse’s participation involves the integration of Canton-connected tokenization with Deutsche Börse’s D7 digital securities post-trade infrastructure, enabling Canton tokens to be settled through D7’s BaFin-regulated digital securities registration system.

The combination of market infrastructure participants (Cboe, Deutsche Börse) with custodians (BNY Mellon) and dealer banks (Goldman Sachs) creates the participant network that could eventually support end-to-end lifecycle management of institutional financial instruments on Canton infrastructure — from issuance through trading, custody, margin, and settlement.

Regulatory Positioning

Canton is a permissioned network with known, credentialed participants — a structure that aligns with financial market regulation’s emphasis on supervised, identified counterparties. Unlike public blockchain networks where anonymous participation creates AML and sanctions screening challenges, every Canton participant is subject to Digital Asset’s onboarding requirements and each participant institution’s own regulatory obligations.

The Canton network does not itself hold regulatory authorization — it is technology infrastructure operated by Digital Asset and used by regulated institutions. The regulatory compliance of Canton-connected applications is the responsibility of the regulated institution operating each application, consistent with how other technology infrastructure (trading systems, settlement platforms) is regulated in financial markets.

Further Resources

• Tokenization Licensing Overview
• Tokenization Encyclopedia
• Investment Product Structures
• Jurisdiction Profiles