Asset HausAsset Haus
Back to Blog
Regulations

ADGM Digital Asset Licensing for Tokenization Companies: Complete 2026 Guide

Asset Haus Team·2026-04-01·10 min read

ADGM — Abu Dhabi Global Market — is widely recognized as one of the top-three jurisdictions globally for digital asset regulation. For companies doing tokenization of real-world assets, private securities, or structured products in the $5–25M deal range, ADGM offers a unique combination: institutional credibility, English common law, clear security token rules, and a sandbox pathway that gets you operational in 3–6 months.

This guide covers the ADGM FSRA framework in full: what license you need, what it costs, how long it takes, and the strategic choice between RegLab (sandbox) and full FSP.


Why ADGM for Tokenization

ADGM sits on Al Maryah Island in Abu Dhabi and operates as an independent financial free zone with:

  • English common law — the only financial free zone in the Middle East with a full common law system and experienced English judges
  • Independent courts — contract enforcement predictable for international counterparties
  • Purpose-built virtual asset framework — built from scratch in 2018, not retrofitted from existing rules
  • Abu Dhabi sovereign backing — ADIA, Mubadala, ADQ give long-term stability confidence
  • IOSCO/FATF aligned — framework follows international standards, increasing cross-border acceptance

For security tokens specifically, ADGM's "substance over form" approach means tokenized securities are regulated based on their economic nature — providing the certainty that institutional investors and counterparties need.


The Licensing Framework: No Separate "Crypto License"

ADGM does not issue a standalone virtual asset license. Instead, it uses the existing Financial Services Permission (FSP) framework and adds virtual asset-specific permissions. This is actually an advantage: it gives your company the same standing as traditional financial services firms.

The relevant regulated activities for a tokenization company under FSMR Schedule 1:

ActivityRelevance to Tokenization
Arranging Deals in InvestmentsStructuring token offerings, matching buyers/sellers
Advising on InvestmentsAdvisory to issuers and investors
Dealing in Investments as AgentExecuting trades for clients
Managing AssetsDiscretionary management of tokenized portfolios
Providing CustodyHolding tokens/private keys for clients
Managing a Collective Investment FundRunning tokenized fund vehicles
Operating an Exchange/MTFRunning a digital asset trading platform

For a $5–25M tokenization company, the typical FSP covers:

  1. Arranging Deals in Investments (core: structuring)
  2. Advising on Investments
  3. Dealing in Investments as Agent (if facilitating investor participation)
  4. Providing Custody — or use third-party custodian to avoid this

Security tokens (tokenized equity, structured notes) classified as "Securities" under FSMR get securities regulation plus the virtual asset overlay. This dual treatment creates clarity — and regulatory legitimacy.


Capital Requirements

ADGM uses a "highest of" approach: your required capital equals the maximum of Base Capital Requirement (BCR), Expenditure-Based Capital Requirement (EBCR), and Risk-Based Capital.

Base Capital by Activity

ActivityBase Capital (USD)
Arranging Deals only10,000
Advising on Investments only10,000
Dealing as Agent250,000
Dealing as Principal2,000,000+
Managing Assets (discretionary)250,000
Providing Custody250,000–500,000
Operating Exchange/MTF2,000,000+

Expenditure-Based Capital (EBCR)

EBCR = Annual Operating Expenditure ÷ 12 × 6 (six months' operating costs)

Example: If your annual operating expenses are $400,000, your EBCR = $200,000. If your BCR is $250,000 (dealing as agent), the binding capital is $250,000 — the higher figure.

Realistic Capital for a Tokenization Company

ScenarioRealistic Total Capital
Arranging + Advising (no custody or dealing)USD 50,000–150,000
Arranging + Advising + Dealing as AgentUSD 250,000–500,000
Full stack (adding custody)USD 500,000–1,000,000+
RegLab (any scenario)~50% of full FSP equivalent

The FSRA may also apply a virtual asset capital surcharge of 25–50%, reflecting technology and cybersecurity risk. Plan for the high end of these ranges.


RegLab vs Full FSP: The Key Decision

This is the most important strategic choice for a tokenization startup entering ADGM.

FactorFull FSPRegLab (Sandbox)
Time to market6–12 months3–6 months
Capital neededUSD 250,000–500,000+~50% of full FSP
First-year cost (excl. capital)USD 390,000–870,000USD 250,000–530,000
Client limitsNoneTypically 50–100 clients
Deal size limitsNoneSubject to FSRA discussion
CredibilityMaximumGood — still fully FSRA-regulated
RiskHigher upfrontLower; can exit if model fails
DurationIndefiniteUp to 2 years, then must graduate

Why RegLab works well for tokenization: If your typical deal has 5–20 investors and ticket sizes of $100k–$5M, the 50–100 client limit in RegLab is not binding. You can execute real deals, generate real revenue, and build a compliance track record — all before committing to full FSP capital.

Recommended Phased Approach

Months 0–1:   Incorporate ADGM company + pre-application engagement
Months 1–2:   Submit RegLab application
Months 3–5:   RegLab approval + satisfy conditions
Months 5–6:   Begin operations under RegLab
Months 6–18:  Execute deals, build track record, prepare full FSP
Months 18–24: Graduate to full FSP

Timeline: Full FSP Application

PhaseDuration
Pre-application (informal FSRA engagement)1–3 months
Application submission1–2 months
FSRA review and Q&A3–6 months
In-principle approval + conditions
Satisfy conditions (capital, office, staff)1–3 months
Final FSP grant2–4 weeks
Total6–12 months

Factors that accelerate: clean regulatory history, well-drafted application, experienced legal counsel, clear and simple business model.

Factors that delay: complex multi-activity scope, gaps in key personnel fit-and-proper assessment, novel product structures.


Costs: Complete Breakdown

Regulatory Fees

Fee ItemAmount (USD)Frequency
FSP application fee1,000–5,000One-time
Annual supervision levy15,000–70,000Annual
ADGM commercial license2,000–4,000Annual
Data protection registration500–1,500Annual

Annual supervision levy ranges:

  • Category 1 (minimal complexity): ~$15,000–25,000/year
  • Category 2 (moderate): ~$25,000–40,000/year
  • Category 3 (multiple activities): ~$40,000–70,000/year

Setup Costs

ItemAmount (USD)
Legal counsel (application)30,000–80,000
Compliance manuals/policies15,000–40,000
Smart contract audit10,000–30,000
Company incorporation3,000–8,000
Fit-and-proper assessments2,000–5,000 per person

Annual Operating Costs

ItemUSD/Year
Office rent (ADGM, Al Maryah Island)15,000–60,000
Senior Executive Officer80,000–200,000
Compliance Officer / MLRO60,000–150,000
Finance Officer40,000–100,000
Compliance consultants20,000–50,000
Annual audit15,000–40,000
Technology (blockchain analytics, KYC, AML)20,000–60,000
Third-party custody5,000–25,000

Total Cost Summary

CategoryFirst Year (USD)Annual Ongoing (USD)
Full FSP (excl. capital)390,000–870,000335,000–720,000
Full FSP (incl. capital held)640,000–1,370,000335,000–720,000
RegLab (excl. capital)250,000–530,000223,000–465,000
RegLab (incl. reduced capital held)375,000–780,000223,000–465,000

Personnel: The Approved Persons Requirements

RoleRequirementResidency
Senior Executive Officer (SEO)Mandatory; day-to-day managementUAE resident
Compliance Officer (CO)MandatoryUAE resident preferred
MLROMandatory; AML/CFT responsibilityUAE resident
Finance OfficerMandatory; capital monitoringUAE resident preferred
Board of DirectorsMinimum 2; independent expected for larger firms1+ UAE resident

The SEO and MLRO are "Approved Persons" — they must pass FSRA's fit-and-proper assessment. This typically requires 5–10+ years in financial services, clean regulatory history, and financial soundness.

Minimum viable team: 3–4 persons (SEO, CO/MLRO combined, Finance Officer, Operations/Tech). The CO and MLRO can be combined for small firms.


AML/KYC and Technology Requirements

Virtual Asset-Specific AML

  • Travel Rule: Transfers above USD 1,000 must include originator and beneficiary information
  • Blockchain analytics: FSRA expects firms to use tools like Chainalysis or Elliptic
  • Wallet screening: Against sanctions lists and known illicit addresses
  • Both on-chain and off-chain monitoring required

Smart Contract Requirements

For tokenization platforms specifically:

  • Independent smart contract audit before launch
  • Documented governance for upgrades and patches
  • Multi-sig or equivalent controls for admin functions
  • Annual IT audit by independent auditor

Custody Standards

If self-custodying (Providing Custody permission required):

  • 80%+ of client assets in cold storage
  • Multi-signature (minimum 2-of-3 or 3-of-5) for all wallets
  • Daily reconciliation; annual independent custody audit
  • Individual client records segregated from firm assets

Recommended alternative: Use a licensed ADGM custodian (Copper, Hex Trust, others). Budget $5,000–25,000/year. Avoids the additional capital burden and operational complexity.


Tax: 0% Corporate Tax

ADGM entities qualifying as Qualifying Free Zone Persons (QFZP) enjoy 0% corporate tax on qualifying income.

QFZP conditions (simplified):

  1. Adequate substance in ADGM (office, employees, proportionate operating expenditure)
  2. Qualifying income: services to other free zone entities, or qualifying activities
  3. No election to be subject to regular UAE CT
  4. Transfer pricing compliance
  5. Audited financial statements

For a tokenization company doing international deals: revenue from clients outside UAE generally qualifies for 0%. Revenue from UAE mainland clients may be subject to 9% corporate tax.

UAE has no withholding tax on dividends, interest, royalties, or distributions — significant for structuring token distributions to international investors.


ADGM vs VARA: Which Is Right for You?

DimensionADGMVARA (Dubai)
Legal systemEnglish common lawUAE civil law
Institutional credibilityVery highHigh and growing
Security token clarityExplicit guidanceGrowing
Fund management frameworkStrongLess developed
Sandbox pathwayRegLab (mature)MVP stage
Tax0% (QFZP)9% may apply
Geographic overlapADGM onlyDubai mainland + free zones

ADGM is the stronger choice if your business focuses on security tokens, institutional investors, fund management, or requires English common law comfort for counterparties.

VARA is better if you're primarily crypto-native, retail-facing, or your team is Dubai-based with no appetite to commute to Abu Dhabi.

Critical: these are separate jurisdictions. ADGM license does not authorize Dubai operations. Many serious tokenization companies pursue both.


Key Service Providers

  • Legal: Al Tamimi & Company, Hadef & Partners, Simmons & Simmons, Clifford Chance, DLA Piper
  • Compliance: KARM Legal Consultants, Aon Middle East, specialist RegTech firms
  • Audit: PwC, Deloitte, EY, KPMG — all have ADGM offices
  • Technology: Fireblocks (custody infrastructure), Chainalysis/Elliptic (blockchain analytics), Sumsub/Onfido (KYC)

Sources

Regulatory fees and capital requirements are based on knowledge through May 2025. Verify current figures against the FSRA Rulebook before relying on them for business decisions.


This article is for informational purposes only and does not constitute legal advice. Always consult ADGM-experienced legal counsel for specific licensing decisions.

ADGMFSRAAbu DhabiUAEtokenizationRWAdigital assetslicensingRegLabsecurity tokens2026