Securities Ownership Is Not a List
You don't own your stocks. You hold a claim against a broker, who holds a claim against a depository, who holds a claim against an issuer. Tokenization proposes to collapse that chain.
You buy 100 shares of a company through your brokerage. Your account shows 100 shares. You assume you own them.
You don't. Not in the way an engineer would define ownership.
What you hold is a security entitlement, a claim against your broker. Your broker holds a proportional claim against the Depository Trust Company. DTC's nominee, an entity called Cede & Co., is the name on the issuer's official register.
The issuer's records say Cede & Co. owns those shares. Your name appears nowhere in the issuer's books.
This structure is not a legacy accident. It is the infrastructure that settles trillions of dollars in securities transactions every day.
The register and who keeps it
Paper certificates are gone. What remains is an official list of registered owners maintained by a transfer agent on the issuer's behalf. The SEC calls it the master securityholder file, the authoritative record of who owns an issuer's securities.
The transfer agent is the gatekeeper for this list. Share transfers, dividend distributions, proxy vote eligibility all flow from it. If your name is on the register, you have rights. If it isn't, you have a claim against someone whose name is.
The register is the single source of truth for ownership. Everything else, your brokerage statement, your portfolio app, your tax documents, is downstream of it.
You are probably not on it
The vast majority of US securities holders are beneficial owners rather than registered owners. Shares held through a broker are legally owned by DTC's nominee, Cede & Co.
Your broker's records say you have a claim to 100 shares. DTC's records say your broker has a claim to some portion of the total held by Cede. The issuer's register says Cede owns the lot.
Each tier is a claim against the tier above. Your entitlement means you can look to your broker for performance of the obligations attached to those shares (dividends, voting rights, proceeds on sale). You cannot look directly to the issuer. If your broker fails, your claim is against SIPC and the broker's estate, not against the company whose stock you thought you owned.
This matters for engineers because it means the "database" that tracks securities ownership is not one database. It is a stack of reconciled ledgers, each maintained by a different institution, each recording a different type of claim.
Why the structure is tiered
The tiered model exists because of a physical constraint that no longer exists but whose infrastructure remains.
In the 1960s, Wall Street hit a crisis that had nothing to do with prices. Trading volume was growing faster than the back offices could process it. Every trade meant physically delivering a stock certificate from the seller's broker to the buyer's broker.
Runners carried bundles of paper between firms in lower Manhattan. By 1968, trading volume reached 12 million shares a day, and the system buckled.
Brokerages started failing not because they made bad trades but because they could not move paper fast enough to settle the good ones. The NYSE shortened its trading week to four days to give back offices time to catch up.
Firms closed on Wednesdays to process the previous week's paperwork. It was called the "paperwork crisis," and it threatened to bring down the entire market infrastructure.
The industry's answer was simple: stop moving the paper. Every certificate went to a central depository, the Depository Trust Company, and stayed there. Ownership transfers became entries on DTC's ledger instead of bundles handed between runners.
And it worked. The certificates stopped moving.
But the structure that replaced physical delivery, a central depository holding everything in one nominee name with layers of book entries below it, became permanent. The physical constraint from 1968 disappeared decades ago. The tiered infrastructure it produced still settles every stock trade in the country.
Today, DTC settles over $2 trillion in securities transactions per day. Every corporate action, every dividend, every stock split flows through this chain of intermediaries before reaching the person who thinks they own the shares.
What tokenization actually proposes
Tokenization is not about digitizing something that is already digital. The ledger entries at DTC and at your broker are already electronic. There is no paper to eliminate.
What tokenization proposes is collapsing tiers. In this model, a token is the ownership record itself. The holder's address on the blockchain is the entry on the issuer's register, with no nominee and no intermediary chain between them.
This is a far more radical proposition than "put the database on a blockchain." It removes the intermediary stack that exists between an investor and the issuer's books. DTC, the broker's back office, the reconciliation processes between them, all become unnecessary if the chain is the register.
The blockchain can record who holds what. Who maintains the authoritative record, who controls updates to it, and what legal framework governs the rights attached to each entry are regulatory questions. The SEC's transfer agent rules govern exactly this. Those rules were written for a world of centralized registers maintained by licensed institutions.
Whether a blockchain can satisfy those rules is the subject of a rulemaking proposal the SEC published in September 2026, with comments due November 3. That is Part 2.
Restrictive legends: the gate on the register
One function of transfer agents is often invisible until you try to build a tokenized system: restrictive legends. A legend is a notation on a security indicating that sale or transfer may be restricted. Transfer agents track, place, and remove legends. An intermediary will not process a transfer of a legended security until the legend is removed.
Legend removal requires a determination that the proposed transfer does not violate Section 5 of the Securities Act, which governs the sale of unregistered securities. That determination involves reviewing exemption criteria, sometimes obtaining an opinion of counsel, and documenting the basis for clearance.
This is a human process. The transfer agent checks a list of authorized persons at the issuer. Counsel reviews documents and renders an opinion. The agent records the determination and removes the legend.
For engineers building tokenized securities, this means a transfer that looks instant on-chain still depends on an off-chain authorization workflow before it can happen. The token may move in milliseconds. The legal clearance to move it may take days.
If counsel determines the exemption doesn't apply, the legend stays and the transfer never executes. In a tokenized system, this means the contract must block the transfer before it settles, not reverse it after. Once tokens move on-chain, unwinding is a compensating transaction, not a rollback.
Where this leaves you
Securities ownership in the US is a chain of claims, not a list of owners. The official register sits with the transfer agent. Most investors never appear on it. The tiered intermediary structure that separates you from the register was built to solve a logistics problem from 1968 and became the foundation for a multitrillion-dollar settlement system.
Tokenization proposes to collapse that structure by making the blockchain the register. Whether the blockchain can serve as the register under existing law depends on what "exclusive control" means when the ledger is distributed, and whether a transfer agent can satisfy its obligations using infrastructure it doesn't exclusively operate.
Those are open questions. The SEC's existing transfer agent rules were written for centralized registers maintained by licensed institutions. How those rules apply to a distributed ledger is unresolved.
Update: Sep 7
The SEC published a 418-page rulemaking proposal that addresses these questions directly. I went through the full document and derived the architecture constraints from the regulatory text. Part 2: What the SEC's Transfer Agent Rules Force You to Build covers exclusive control, the one-business-day SLA, why "smart contract" appears once in 418 pages, and the reporting fields that are really schema requirements in disguise.
Sources
- SEC Release No. 34-106246 - transfer agent rulemaking proposal, master securityholder file definitions, exclusive control requirement
- SEC Release Nos. 33-11412 / 34-105020 - crypto asset classification, digital security definition tied to ownership record location
- DTC Settlement Statistics - $2T+ daily settlement volume
Built by Trio, a fintech-native engineering partner helping teams build the next generation of financial technology and infrastructure.
Subscribe to Ledger Drift for high-signal insights into how modern fintech is built, from systems to code to teams.