Canada's Institutional Tokenization Stack: Bonds, Securities, Custody, Stablecoins, Tokenized Deposits, and the Coordination Gap

Executive summary

Canada now has live regulatory or institutional movement at every layer of the institutional tokenization stack. The bond layer has Project Samara, the Bank of Canada's pilot with Export Development Canada, RBC Capital Markets, and TD Securities, using distributed ledger technology and wholesale central-bank digital money. The securities layer has the CSA Project Tokenization initiative through the CSA Collaboratory, which is actively studying tokenized product frameworks. The custody layer has the CIRO Digital Asset Custody Framework, formalized in February 2026, with three-entity HoldCo / OpCo / CustodyCo separation. The stablecoin layer has QCAD Digital Trust, which has received Canadian securities regulatory approval. The tokenized deposit layer has BMO's announcement of a platform with CME Group and Google Cloud for 24/7 institutional settlement.

Each piece, in isolation, is a credible signal of Canadian institutional engagement with tokenization. The structural problem is that the pieces exist as a set of independent initiatives, not as a coordinated institutional stack. There is no neutral, regulated, multi-institution venue that connects issuance, custody, stablecoin settlement, tokenized deposit settlement, bank-balance-sheet integration, secondary-market liquidity, and regulatory reporting at scale. Without that connective layer, the individual pieces remain pilots and product launches rather than a working national infrastructure. This report walks through each layer of what exists, identifies the coordination gap, and frames what the institutional opportunity actually is.

1 What the stack actually consists of

A working institutional tokenization stack is not a single product. It is a layered set of regulated services that interoperate. The functional layers, in the order they affect a tokenized transaction:

The issuance layer. Regulated issuers (exempt market dealers, bank capital markets desks, public companies, government issuers) structure a tokenized security or asset and bring it to market under a recognized securities-law framework.

The chain layer. The underlying blockchain or distributed ledger that the tokenized claim is recorded on. In the Canadian regulated context, this is increasingly Polymesh (the public-permissioned chain originated by Polymath) or a permissioned enterprise DLT used inside a specific pilot.

The custody layer. Qualified custodians that hold the digital security on behalf of institutional beneficial owners, under the CIRO Digital Asset Custody Framework. Tetra Trust, Balance, and Brane Inc. are the active providers.

The stablecoin and digital cash layer. Regulated digital cash instruments that serve as the settlement leg for tokenized transactions. QCAD (Stablecorp), CADC (Loon), tokenized deposits (BMO and others to come), and eventually wholesale CBDC.

The marketplace and settlement layer. A regulated multi-institution venue where tokenized assets are issued, transferred, traded on secondary markets, and settled atomically against tokenized cash.

The regulatory and reporting layer. Supervisory access for CIRO, the CSA, FINTRAC, and (for wholesale flows) the Bank of Canada, built into the operational system rather than retrofitted.

Canada has credible operators at every layer except the marketplace and settlement layer. That is the coordination gap.

2 The bond layer, validated by Project Samara

Project Samara, the Bank of Canada's tokenized bond pilot, is the most consequential Canadian bond-layer event in the institutional tokenization category to date. The pilot used distributed ledger technology and wholesale central-bank digital money to issue a Canadian-dollar tokenized bond, with Export Development Canada as the issuer and RBC Capital Markets and TD Securities as joint lead managers. The Bank of Canada has publicly described the pilot as an important step in understanding tokenization, DLT, and how they can improve financial instruments for investors, businesses, and the financial community.

What Samara validated, in plain terms:

A Canadian-dollar tokenized bond can be issued on DLT under regulated conditions
Wholesale central-bank digital money can serve as the cash leg for institutional settlement
The major Canadian Crown corporations (EDC) and Tier-1 banks (RBC, TD) will participate when the regulatory perimeter is clear
Lifecycle management (coupon payments, registration changes, redemption) can be operationalized on DLT
Secondary-market functionality can be modeled inside a pilot perimeter

These are not small validations. They collectively settle the question of whether Canadian institutional tokenization is technically and regulatorily feasible at the bond layer. It is.

What Samara was not designed to deliver, and explicitly did not deliver, is production multi-bank settlement scale, commercialized tokenized deposit infrastructure, live regulated secondary-market liquidity, or custody and audit interoperability across the broader Canadian institutional base. Those layers are the next phase of work, and they are what the rest of this report addresses.

3 The securities layer, with CSA Project Tokenization

In parallel to the operational pilot at the Bank of Canada, the Canadian Securities Administrators have launched Project Tokenization through the CSA Collaboratory. The Collaboratory is the CSA's mechanism for working through complex emerging product and market-structure questions across provincial securities regulators in a coordinated fashion. Project Tokenization is its formal workstream on tokenized products.

The institutional significance of the CSA stepping into Project Tokenization is that it signals provincial securities regulators are not waiting for the federal government or for industry to settle the framework. They are actively studying tokenized products, working through investor-protection implications, mapping operational requirements, and beginning to define the conditions under which tokenized securities can be issued, traded, and held at scale by Canadian regulated counterparties.

This matters for the broader institutional stack because the securities layer is the layer that defines what kinds of tokenized issuance can credibly proceed. Without active CSA engagement, every individual Canadian tokenization issuer would face longer regulatory cycles, more uncertain operational treatment, and a higher cost of compliance. With it, the conditions for scaling become structurally clearer over time.

4 The custody layer, formalized by CIRO

The Canadian custody framework for digital assets crossed a meaningful threshold in February 2026 with the formalization of the CIRO Digital Asset Custody Framework. The framework defines what qualified custody for digital assets means in the Canadian regulatory context, with explicit requirements for three-entity HoldCo / OpCo / CustodyCo separation, tiered capital and bonding, operational and technology controls, independent attestation and audit, and weekly custody monitoring data flowing to CIRO.

The active providers operating under the framework are Tetra Trust (Calgary), Balance (Toronto), and Brane Inc. (Ottawa). Each operates with provincial trust authority, capital backing aligned to assets under custody, and the operational discipline that institutional mandates require. Tetra Trust has the deepest institutional relationships, Balance has the insurance-backed posture, and Brane has the trust-company-backed structure focused on regulated Canadian institutional flows.

The custody layer is no longer the bottleneck. It is operational, it has capacity, and the regulatory expectations are well-defined. The bottleneck has migrated to the marketplace and settlement layer, where Canadian institutional counterparties need the venue layer to mature in parallel before custody-side capacity gets fully utilized.

5 The stablecoin layer, with QCAD Digital Trust regulatory approval

The Canadian CAD stablecoin layer has multiple credible operators, but QCAD Digital Trust receiving Canadian securities regulatory approval is a structurally important event. Approval at the trust level confirms that Canadian regulators are prepared to engage CAD stablecoin issuance under conventional financial-services regulatory frameworks rather than through bespoke exception structures. That alignment is what makes the instrument usable for institutional settlement.

In parallel, Loon's regulated CAD stablecoin (following the CADC acquisition from Paytrie) operates with the same regulatory posture. Cybrid functions as the enterprise payments orchestration layer that connects regulated institutions to stablecoin flows in a compliant manner. The cumulative CAD-denominated digital cash layer is genuinely operational, even if absolute volume is small relative to USD-denominated peers.

The federal stablecoin framework, announced as part of the Canadian government's broader digital-finance policy direction, is expected to continue development over the next 12 to 18 months with the framework coming into force in 2027. Bank of Canada officials, including Governor Tiff Macklem, have publicly stated that stablecoins should be redeemable one-to-one and backed by high-quality liquid assets, the same posture that international regulators have converged on for institutional-grade stablecoin issuance.

6 The tokenized deposit layer, opened by BMO

The most recent and arguably most institutionally consequential development in the Canadian digital cash stack is BMO's announcement of a tokenized cash and deposit platform with CME Group and Google Cloud. The platform targets 24/7 institutional settlement, margin and collateral movement, treasury operations, and programmable cash for institutional counterparties. Launch is expected in the second half of 2026, subject to regulatory approval.

The structural significance is that BMO is a Tier-1 Canadian bank entering the tokenized digital cash category directly, with a US institutional partner (CME Group) and an institutional cloud and infrastructure partner (Google Cloud). This is not pilot-stage activity. It is product launch positioning, with explicit institutional use cases (settlement, margin, collateral, treasury), explicit target counterparties (institutional, not retail), and explicit regulatory pathway engagement.

The implication for the broader Canadian institutional tokenization stack is large. Tokenized deposit infrastructure provides the bank-balance-sheet digital cash layer that complements the regulated stablecoin layer (CAD-pegged, backed by reserves) and the eventual wholesale CBDC layer (central-bank money for interbank settlement). When all three are operational, Canadian institutional counterparties will have a complete digital cash menu calibrated to their specific use case and regulatory preference.

7 The coordination gap

Each layer above is credible. The problem is that the layers operate as independent initiatives, not as a coordinated institutional stack. The functional consequence:

An issuer who tokenizes a real estate offering on Polymesh, with Ocree Capital as the EMD, with Tetra Trust as custodian, with QCAD as the settlement leg, cannot route the offering through a single regulated multi-institution venue. There is no such venue at production scale.
An institutional buyer who wants exposure to a tokenized Canadian commercial mortgage cannot, today, transact that exposure on regulated CAD-denominated settlement rails through a venue that interoperates with their existing custody arrangement. The pieces exist; the venue layer does not.
A Tier-1 Canadian bank operating tokenized deposits (BMO and the next several to come) needs a multi-bank, neutral venue and settlement architecture to make the tokenized deposit useful across counterparties beyond its own client base. Without it, every bank's tokenized deposit is, by construction, a single-bank network (the JPMorgan Kinexys pattern), which is wrong for a national settlement layer.
The CSA's Project Tokenization work, the CIRO custody framework, the Bank of Canada's wholesale CBDC research, and the FINTRAC stablecoin policy work all proceed in parallel without a single operational venue against which the regulatory framework can be exercised at production scale.

The coordination gap is the structural opportunity. Closing it requires a regulated multi-institution venue and settlement layer, built under multi-bank governance, operating inside the Canadian regulatory perimeter, with native CAD-denominated settlement across stablecoin, tokenized deposit, and (eventually) wholesale CBDC instruments. That layer is what 4orm Finance is being designed to operate.

8 What it would take to close the gap

Closing the coordination gap is a structural build, not a marketing campaign. The operational requirements are concrete.

Multi-institution governance. The venue cannot be a single-bank initiative. The JPMorgan Kinexys experience, where Kinexys operates as JPMorgan's network with non-JPMorgan counterparties unable to participate as peers, demonstrates the failure mode of single-bank infrastructure for a national settlement layer. The Canadian venue must be multi-bank, multi-custodian, multi-issuer from inception.

CIRO-compliant three-entity separation. HoldCo, OpCo, CustodyCo, structurally and operationally separate. This is the framework requirement and also the architectural choice that makes the venue compatible with institutional procurement standards.

Native CAD-denominated settlement. The venue must interoperate with QCAD, the regulated CADC, BMO's tokenized deposit platform, and other regulated CAD-denominated instruments as they emerge. Asset and cash legs must settle atomically.

Supervisory access from inception. CIRO, the CSA, FINTRAC, and the Bank of Canada need operational supervisory access that is fast and efficient for both sides. Building this in from the start is cheaper than retrofitting.

Cross-jurisdictional interoperability. Canadian-issued tokenized assets need to be transactable by qualified international institutional buyers, and Canadian institutional buyers need access to international tokenized asset exposure on Canadian settlement rails. Interoperability with international qualified custodians and selected international venues is a structural requirement, not an optional feature.

Anchor institutional participation. At least one Tier-1 Canadian bank, one major Canadian Crown corporation or insurance pool, and one major Canadian asset manager need to participate as anchor counterparties from the venue's first phase of operation. Without anchor counterparties, the venue is a thesis rather than a working market.

9 The institutional opportunity

The opportunity is to operationalize the coordination layer that the rest of the stack has been preparing the ground for. The supply side (issuers across real estate, mortgages, commodities, credit) is materially scaling. The custody side is operational. The CAD digital cash side is multi-instrument and increasingly regulated. The bank side is engaging (BMO with CME and Google Cloud, RBC and TD via Project Samara). The regulatory side is actively working (CSA Project Tokenization, CIRO custody framework, FINTRAC stablecoin policy, Bank of Canada wholesale CBDC research).

The connective layer is what 4orm Finance is being designed to operate. The thesis is simple: build the venue that the rest of the institutional stack has been waiting for, under multi-institution governance, with native CAD settlement, with supervisory access from inception, with cross-jurisdictional interoperability. The market does not need another issuer, another custodian, another stablecoin, or another tokenized deposit platform. It needs the coordination layer that connects all of them.

10 The constructive read

Canada has assembled, layer by layer, the institutional tokenization stack that no other jurisdiction has put together in quite the same combination. The CSA's Project Tokenization, the CIRO Digital Asset Custody Framework, QCAD's regulatory approval, the Bank of Canada's Project Samara, BMO's tokenized cash platform with CME and Google Cloud, and the issuer-side scaling across real estate, mortgages, and commodities, together represent the most coherent institutional tokenization foundation in any G7 jurisdiction.

What is missing is not credibility, capital, regulatory clarity, or technology. What is missing is the coordination layer. The venue. The neutral, regulated, multi-institution settlement architecture that turns the existing pieces into a working national infrastructure. That is the institutional opportunity in front of Canada in the 2026 to 2028 window. The pieces will not coordinate themselves.

Background and Sources

This report is institutional research from KCS Capital. It is for informational purposes only and does not constitute an offer or solicitation to buy or sell securities. KCS Capital Inc. is an independent technology and research firm; 4orm Finance operates as a separate regulated entity.

Canada's Institutional Tokenization Stack. The Coordination Gap.