By the end of the Foundations track you have the vocabulary and the mechanics. What is often still missing is the map: when a real digital-securities deal happens, who actually does the work? Who plumbs the chain? Who verifies the investor? Who holds the keys? Who runs the venue where the token trades?

This article walks the ecosystem end-to-end. Not a vendor directory, but a mental map of the roles — because vendors come and go, but the roles stay the same.

The five layers

The tokenization ecosystem stacks into five layers. Every real deal touches every layer, whether one company handles it or ten.

1. Infrastructure layer. Blockchains (Ethereum L1, L2s like Polygon and Arbitrum, and permissioned chains like Provenance), plus supporting infrastructure — RPC providers, indexers, oracles.
2. Protocol layer. Token standards (ERC-3643, ERC-1400, ERC-20 for cash legs), identity standards (ONCHAINID, DID), and stablecoins that serve as the on-chain cash leg.
3. Service-provider layer. Issuance platforms, custodians, KYC/AML providers, transfer agents, paying agents, tax and reporting services.
4. Venue layer. ATS operators, MTFs (in Europe), Reg A+ portals, primary distribution platforms, and OTC desks. This is where liquidity — such as it is — lives.
5. Participant layer. Issuers, investors (retail, accredited, institutional), broker-dealers, and the regulators who oversee all of the above.

Higher layers depend on lower ones. Without the infrastructure and protocol layers, there is nothing to build on. Without the participant layer, there is nothing to build for.

Layer 1 — Infrastructure

Public blockchains are the default settlement layer. Ethereum still dominates for institutional-grade digital securities because of its maturity, tooling, and regulatory familiarity. Layer 2s (Arbitrum, Base, Polygon) are increasingly used for cost reasons, with tokens either bridged or issued natively.

Permissioned chains — Provenance, Onyx, Canton — exist where issuers want isolated environments with known validators. They trade off composability with the wider DeFi ecosystem for control.

Oracles (Chainlink is the reference example) bring off-chain data on-chain: NAV feeds for tokenized funds, price references for collateral, proof-of-reserve for stablecoins. Without oracles, most compliance rules and interest-bearing products cannot function.

RPC and indexer providers (Alchemy, Infura, The Graph) are the plumbing everyone forgets about until it breaks. Every wallet, dashboard, and compliance system reads chain state through one of them.

Layer 2 — Protocol

This layer is the “language” the tokens speak.

• ERC-3643 (T-REX) — the current reference standard for permissioned security tokens. Every transfer runs through a compliance check tied to an identity registry.
• ERC-1400 — earlier permissioned standard, still used, especially where partitioning of tranches matters.
• ERC-20 — the universal fungible standard used for the cash leg (USDC, EURC, tokenized cash) that settles alongside the security token.
• Stablecoins (USDC, USDP, EURC) and tokenized cash (JPM Coin, Onyx, Circle’s tokenized products) serve as the on-chain money that makes DvP possible.
• Identity standards (ONCHAINID, DIDs) attach verifiable KYC/accreditation claims to a wallet so any compliance module can check them.

If you cannot name the token standard and the cash-leg instrument in a deal, you do not yet understand how the settlement works.

Layer 3 — Service providers

This is the layer most Foundations readers will actually work with. It is where the “boring but essential” work lives.

• Issuance platforms (Securitize, Tokeny, Polymath, ADDX, InvestaX) package the standard workflow: cap table, subscription flow, KYC integration, token deployment, and often the primary distribution portal. Most issuers do not build this themselves.
• Custodians (Anchorage, BitGo, Fireblocks, Copper, Komainu) hold the private keys for institutional participants. Retail investors may self-custody or use a qualified custodian; institutions almost always use one.
• KYC / AML / identity providers (Sumsub, Onfido, Persona, Chainalysis, TRM) do the actual investor verification and transaction monitoring feeding into on-chain identity registries.
• Transfer agents. In the U.S., a registered transfer agent is a regulatory requirement for many offerings. Firms like Securitize (registered TA) and ClearTrust bridge SEC obligations with on-chain records.
• Paying agents, tax and reporting. Distributions, 1099s, K-1s, withholding, jurisdictional reporting — often handled by the issuance platform, sometimes by specialists.
• Legal and structuring firms. Every deal starts here. The SPV, the offering docs, the exemption analysis. Tokenization does not remove this work; it changes what happens after it is done.

Most deals rely on 4–6 of these service providers stitched together. The issuance platform usually orchestrates the rest.

Layer 4 — Venues

Venues are where digital securities are bought and sold, both primary (issuance) and secondary (resale). This layer is thinner than most newcomers expect — see Article 8.

• Primary distribution portals — often bundled with the issuance platform (Securitize Markets, ADDX, InvestaX). Where the token is first sold.
• Reg A+ portals — retail-facing platforms operating under Reg A+ (Republic, tZERO, StartEngine).
• ATS venues (U.S.) — SEC-registered alternative trading systems. tZERO, Securitize Markets, INX. Small volumes, growing.
• MTFs (Europe) — the EU equivalent. Archax, 21X, and a handful of national platforms.
• OTC desks and RFQ — for institutional-size blocks. Often the real place large digital-securities trades happen.
• DeFi venues (limited). Permissioned pools and compliant AMMs exist (Ondo, Maple, Centrifuge). They serve institutional participants operating under KYC — not open DeFi.

If you remember one thing about the venue layer: tokenization does not guarantee liquidity, it just makes liquidity possible. Whether it materializes depends on the deal and the venue.

Layer 5 — Participants

The people, firms, and regulators whose actions the whole stack exists to serve.

• Issuers — companies, funds, real-estate sponsors, banks. Anyone raising capital or repackaging an existing asset.
• Investors — retail (where permitted), accredited, qualified purchasers, institutions. Every KYC record and transfer rule exists to distinguish these.
• Broker-dealers — required in the U.S. for many primary sales and for operating ATS venues. The “human intermediary” that regulation still requires in most flows.
• Regulators — SEC and FINRA in the U.S.; ESMA and national competent authorities in Europe (MiCA, MiFID II); MAS in Singapore; FINMA in Switzerland; ADGM and VARA in the UAE; SFC in Hong Kong. Each has its own view of what a digital security is and how it may be sold.

How value flows through the ecosystem

Follow a single dollar (or token) end-to-end:

1. Issuer structures the deal with counsel and picks an issuance platform.
2. Platform deploys the token contract using a standard (usually ERC-3643) and configures the identity registry and compliance rules.
3. Investor completes KYC through the platform’s chosen provider; the identity registry marks their wallet as eligible.
4. Primary distribution happens on the platform or a partnered portal. Investor sends stablecoin; the token contract mints and delivers to their wallet. A transfer agent records the transaction on the issuer’s book.
5. Custody — the investor either self-custodies or delegates the wallet to a qualified custodian.
6. Servicing — the paying agent or platform pushes coupons, dividends, or distributions to holder wallets on the record date, in stablecoin.
7. Secondary trading — the investor lists the token on an ATS or MTF where it is registered. A matched trade settles DvP: token moves one way, cash the other, in a single transaction.
8. Redemption / maturity — the token is burned and the underlying entitlement is paid out per the offering docs.

Every one of those steps involves at least one player from the layers above. The ecosystem is the set of firms, contracts, and rules that make all eight steps happen without breaking.

Where the ecosystem is still thin

The map is neat. The reality has gaps.

• Secondary liquidity — the biggest weakness. Most tokens do not trade. See Article 11.
• Cross-venue transferability — a token issued on one platform often cannot easily move to another venue’s order book. Compliance modules and identity registries do not yet interoperate cleanly.
• Cross-chain and cross-jurisdiction settlement — bridging permissioned tokens across chains is still an unsolved problem for regulated flows.
• Institutional-grade tokenized cash — stablecoins mostly work, but bank-issued tokenized deposits are still early and fragmented.
• Standardized reporting — every platform reports differently. Aggregating a portfolio across three issuers on three platforms is still manual.

These are not permanent flaws — they are the frontier the market is actively working on in 2025–2026.

A checklist for reading any deal

Given any digital-securities deal, you should be able to answer:

• Legal wrapper? Which exemption or registration, which SPV or fund vehicle.
• Chain? Which network and why.
• Token standard? ERC-3643, ERC-1400, or something else.
• Identity and compliance provider? Whose KYC feeds the registry; whose module enforces transfers.
• Custody? Self-custody, qualified custodian, or hybrid.
• Primary distribution? Which platform, which portal.
• Transfer agent? Registered where.
• Cash leg? Which stablecoin or tokenized cash.
• Secondary venue? Named ATS/MTF, or “none yet.”
• Servicing? Who runs corporate actions, dividends, reporting.

If a deal cannot answer any one of these, that is the risk you should be asking about — not the marketing gloss on the front page.

The takeaway

The tokenization ecosystem is not a single product. It is a layered stack of specialised roles — infrastructure, protocol, service providers, venues, participants — held together by legal wrappers and on-chain rules.

No one company plays every role, and no serious deal happens without touching most of them. The value of understanding the ecosystem is not that you will personally build any of these layers. It is that when someone hands you a term sheet, an offering deck, or a press release, you can look at it and see the whole machine — not just the marketing.

That is the map. From here, the Advanced track goes deeper into each layer — but the shape stays the same.