How to Issue Digital Securities Compliantly in the EU: A 2026 Regulatory Guide

Issuing digital securities in the European Union is no longer an experimental exercise. The regulatory framework is established, the infrastructure exists, and companies across Germany, Austria, and the broader EU are completing regulated digital securities offerings. What remains unclear for many founders, CFOs, and asset managers is how the process actually works: which regulation applies, what the practical steps are, and what it costs compared to building infrastructure independently.

The 2026 EU Regulatory Landscape for Digital Securities

Four regulatory instruments govern digital securities issuance in the EU.

MiCA came fully into force in 2024 and does not apply to instruments that qualify as financial instruments under MiFID II. Tokenized securities fall outside MiCA's scope and remain governed by the existing securities framework.

MiFID II classifies tokenized securities as financial instruments, meaning any platform involved in their issuance or trading must hold appropriate authorization.

The EU Prospectus Regulation sets disclosure requirements by offering size: exempt below EUR 1 million, simplified disclosure between EUR 1 million and EUR 8 million, full prospectus above EUR 8 million.

The EU Crowdfunding Regulation (ECSPR) provides a passported framework for investment-based offerings up to EUR 5 million across all EU member states under a single authorization.

In Germany, the eWpG adds a further layer: digital securities must be entered in a BaFin-supervised crypto securities register maintained by a licensed operator.

Choosing the Right Instrument: Equity, Debt or Profit Participation

Equity tokens represent ownership with voting rights and dividend entitlement. Debt tokens represent a loan or bond obligation with defined interest and repayment terms. Profit participation rights (Genussrechte) confer an economic interest in profits without granting voting rights — widely used in German SME financing.

The choice depends on the issuer's capital structure, target investor base, and chosen regulatory route.

The Issuance Process Step by Step

Step 1: Legal structuring. Instrument type, regulatory exemption, and investor eligibility criteria are defined with a securities lawyer.

Step 2: Offering documentation. Information memorandum, KIIS, or full prospectus depending on offering size. Typically four to eight weeks for offers under EUR 8 million.

Step 3: Platform setup and token configuration. Transfer restrictions, distribution logic, and vesting parameters are configured on the issuance platform.

Step 4: Investor onboarding. KYC/AML verification and whitelist management. Only verified wallets can hold the token.

Step 5: Offering period and subscription. Subscriptions collected and funds held in a regulated payment account until closing conditions are met.

Step 6: Token issuance and register entry. Tokens minted and distributed. For German issuances, the eWpG register entry establishes legal ownership.

Step 7: Post-issuance management. Ongoing cap table maintenance, corporate actions, and secondary market activity handled by the platform.

Build vs. Platform: What Digital Securities Infrastructure Actually Costs

A DIY approach — covering a licensed register operator relationship, custom smart contract development and audit, KYC/AML integration, investor portal, and legal review — typically costs between EUR 150,000 and EUR 400,000 for a first issuance.

A managed platform compresses this significantly. ONINO's integrated stack covers all of the above at approximately EUR 25,000 per issuance, representing an 80-90% cost reduction. For issuers running multiple offerings or white-labelling the infrastructure for clients, the marginal cost of each subsequent issuance is primarily legal and documentation work.

Ready to launch?

ONINO's infrastructure handles compliance, investor onboarding, and reporting from day one -- so you can focus on structuring your deal and building your investor base. Platforms go live in under 24 hours, with no internal technical build required.

Book a Demo

FAQ

What is the new digital law in the EU relevant to securities issuance?

MiFID II, the EU Prospectus Regulation, ECSPR, and member state laws such as Germany's eWpG. MiCA applies to crypto-assets that are not financial instruments and does not govern tokenized securities.

What is the ESMA digital strategy 2026-2028 and how does it affect issuers?

ESMA's strategy focuses on supervisory technology, data standardization, and digital asset reporting integration. For issuers, the practical implication is increasing expectation around audit trails and transaction reporting quality.

Do I need a prospectus to issue digital securities in the EU?

Not for most early-stage raises. Exempt below EUR 1 million, simplified disclosure between EUR 1 million and EUR 8 million, full prospectus only above EUR 8 million.

How long does a digital securities issuance take from start to finish?

Eight to fourteen weeks for a standard offering under EUR 8 million using a managed platform. The legal and documentation phase is the longest component.

Summary

• Four frameworks govern digital securities in the EU: MiFID II, Prospectus Regulation, ECSPR, and member state laws such as eWpG

• MiCA does not apply to tokenized securities classified as financial instruments under MiFID II

• Offers below EUR 8 million can proceed with simplified disclosure

• The seven-step issuance process runs from legal structuring through token distribution, all manageable through a regulated platform

• Managed platform costs (approximately EUR 25,000) represent an 80-90% reduction compared to building compliance infrastructure independently