Skip to main content

πŸ›‘οΈ SEC CATEGORY 1 COMPLIANCE FRAMEWORK

OTCM Protocol Legal Architecture for Tokenized Securities


βœ… SEC CATEGORY 1 COMPLIANT | Issuer-Sponsored Tokenized Securities pursuant to SEC Division of Corporation Finance, Division of Investment Management, and Division of Trading and Markets Joint Statement dated January 28, 2026


πŸ“‹ Executive Overview

The SEC Category 1 Compliance Framework is OTCM Protocol's legal architectureβ€”a comprehensive regulatory compliance structure designed to operate tokenized securities within the clear boundaries established by the SEC's January 28, 2026 Joint Statement on Tokenized Securities.

Framework Element

Description

πŸ›οΈ

Named After

SEC Category 1 (Issuer-Sponsored Tokenized Securities) framework

🎯

Goal

Operate

fully compliant

tokenized securities infrastructure under federal securities laws

βš–οΈ

Approach

Embrace

securities classification for regulatory clarity and institutional legitimacy

πŸ“œ

Primary Authority

SEC Joint Statement dated January 28, 2026


πŸ”„ Strategic Evolution: From Avoidance to Compliance

Why OTCM Protocol Embraces Securities Classification

OTCM Protocol made a deliberate strategic decision to embrace SEC Category 1 securities compliance rather than attempt to structure tokens to avoid securities classification:

Factor

Avoidance Approach (Rejected)

Compliance Approach (Adopted)

βš–οΈ

Regulatory Certainty

Uncertain, untested theories

Clear SEC framework

🏦

Institutional Access

Limited, compliance concerns

Institutional-ready infrastructure

πŸ›‘οΈ

Investor Protection

No federal protections

Full securities law protections

πŸ’Ž

Value Proposition

Speculative "meme" tokens

True equity ownership

πŸ›οΈ

Legal Standing

Subject to enforcement risk

Operating within established law

πŸ“Š

Market Credibility

"Regulatory arbitrage" perception

Securities market legitimacy

🎯

Target Market

Retail speculation

Serious investors seeking liquidity

πŸ’‘ Core Principle: Rather than engineering around securities laws, OTCM Protocol operates within themβ€”providing the regulatory clarity that enables institutional participation and long-term market sustainability.


βš–οΈ The SEC Category 1 Framework

πŸ›οΈ January 28, 2026 Joint Statement

On January 28, 2026, the SEC's Division of Corporation Finance, Division of Investment Management, and Division of Trading and Markets issued a landmark Joint Statement establishing clear guidance for tokenized securities.

Core Regulatory Principle

πŸ’‘ "The format in which a security is issued or the methods by which holders are recorded does not affect application of the federal securities laws to the security or to transactions in the security."

Category 1 vs. Category 2 Taxonomy

Category

Description

OTCM Status

Category 1

Issuer-Sponsored Tokenized Securities

βœ…

OTCM Model

Category 2

Third-Party Tokenized Securities

❌ Not applicable


πŸ“‹ The Seven Pillars: Category 1 Compliance Requirements

The SEC Category 1 framework establishes seven requirements that OTCM Protocol satisfies:

Pillar 1: πŸ›οΈ Direct Issuer Authorization

Requirement

Implementation

Status

Board Resolution

Issuer board must formally authorize Series M preferred share creation and tokenization

βœ…

Corporate Action

Tokenization is official corporate act, not third-party initiative

βœ…

Issuer Responsibility

Issuer takes responsibility for token as equity representation

βœ…

How It Works:

  • Issuer board passes resolution authorizing Series M Preferred Share creation
  • Resolution explicitly authorizes tokenization on OTCM Protocol
  • Corporate minutes document authorization chain
  • No tokenization proceeds without verified board approval

Pillar 2: πŸ“ Official Shareholder Register

Requirement

Implementation

Status

Certificate of Designation

Filed with Wyoming Secretary of State

βœ…

Official Recognition

Token holders recognized as shareholders

βœ…

Legal Documentation

Preferred share terms formally recorded

βœ…

How It Works:

  • Certificate of Designation filed establishing Series M Preferred Shares
  • Certificate defines: conversion rights, protective triggers, dividend rights
  • Wyoming Secretary of State records create official shareholder register
  • Token ownership maps to official corporate records

Pillar 3: 🏦 Regulated Custody

Requirement

Implementation

Status

SEC-Registered Custodian

Empire Stock Transfer Inc.

βœ…

Qualified Custody

Shares held by SEC-registered transfer agent

βœ…

Verification

Real-time custody verification via oracle

βœ…

How It Works:

  • Empire Stock Transfer (SEC-registered transfer agent) holds all backing shares
  • Custody verified every ~400ms via Transfer Hook oracle
  • No ST22 token can exist without verified custody backing
  • Golden Medallion Guarantee authenticates share ownership

Pillar 4: πŸ’Ž True Equity Backing

Requirement

Implementation

Status

1:1 Backing

Each ST22 token backed by one preferred share

βœ…

Real Ownership

Token represents actual equity, not derivative

βœ…

Conversion Rights

Convertible to common stock per Certificate

βœ…

How It Works:

  • Every ST22 token represents exactly one Series M Preferred Share
  • Shares are real equity in the underlying company
  • Conversion rights allow conversion to common stock
  • NOT a derivative, NOT a synthetic, NOT a contractual claimβ€”true equity

Pillar 5: πŸ”— Clear Ownership Chain

Requirement

Implementation

Status

CUSIP Assignment

Unique securities identifier

βœ…

Golden Medallion

Authentication guarantee

βœ…

Unambiguous Path

Clear chain from token to underlying asset

βœ…

How It Works:

  • Each Series M issue receives CUSIP number
  • Golden Medallion Guarantee authenticates share transfers
  • Blockchain provides immutable ownership record
  • Clear legal path: Token β†’ Smart Contract β†’ Custody β†’ Shares β†’ Company

Pillar 6: πŸ›‘οΈ Investor Protection

Requirement

Implementation

Status

42 Transfer Hook Controls

Mathematical security enforcement

βœ…

Protective Conversion

Automatic protection triggers

βœ…

Circuit Breakers

Trading halt on extreme volatility

βœ…

How It Works:

  • 42 Transfer Hook controls execute on every transaction
  • Protective conversion triggers on adverse issuer events
  • Circuit breakers halt trading at 30% price decline
  • Wallet limits prevent concentration (4.99% maximum)
  • OFAC screening prevents sanctioned party transactions

Pillar 7: πŸ“œ Token Standard Compliance

Requirement

Implementation

Status

SPL Token-2022

Solana token standard with extensions

βœ…

Transfer Hooks

Programmable compliance enforcement

βœ…

Immutable Controls

Security controls cannot be disabled

βœ…

How It Works:

  • SPL Token-2022 standard provides Transfer Hook capability
  • Transfer Hooks execute compliance logic on every transaction
  • Controls are mathematically enforced, not policy-based
  • Major DEXs disable Transfer Hooksβ€”CEDEX maintains them

πŸ” The 42 Transfer Hook Controls

Mathematical Security Architecture

Unlike the theoretical "shields" of avoidance strategies, Category 1 compliance uses mathematically enforced controls that execute automatically on every transaction:

Control Categories

Category

Controls

Function

🏦

Custody Verification

6 controls

Verify 1:1 backing on every transaction

πŸͺͺ

Investor Verification

8 controls

KYC/AML/accreditation status checks

πŸ“Š

Position Limits

5 controls

Wallet concentration limits (4.99% max)

πŸ”΄

Circuit Breakers

4 controls

Trading halts on extreme volatility

⏰

Vesting Enforcement

6 controls

Smart contract vesting schedules

🚫

Sanctions Compliance

5 controls

Real-time OFAC screening

πŸ”„

Protective Conversion

4 controls

Automatic protection triggers

πŸ“‹

Record Keeping

4 controls

Compliance audit trail


Key Control Details

🏦 Custody Verification Controls

Control

Function

Frequency

CV-01

Verify custody account balance

Every ~400ms

CV-02

Validate 1:1 backing ratio

Per transaction

CV-03

Confirm Empire Stock Transfer status

Per transaction

CV-04

Check custody oracle health

Continuous

CV-05

Validate CUSIP matching

Per transaction

CV-06

Confirm Golden Medallion status

Per transfer

πŸͺͺ Investor Verification Controls

Control

Function

Enforcement

IV-01

KYC verification status

Block unverified wallets

IV-02

Accredited investor status

Block non-accredited for ST22

IV-03

AML screening results

Block flagged parties

IV-04

Identity verification

Require verified identity

IV-05

Jurisdiction check

Block prohibited jurisdictions

IV-06

Age verification

Block minors

IV-07

Professional investor status

Track investor classification

IV-08

Verification expiry

Require re-verification

πŸ”΄ Circuit Breaker Controls

Control

Trigger

Action

CB-01

30% price decline

Halt trading

CB-02

Unusual volume spike

Alert + potential halt

CB-03

Rapid consecutive trades

Rate limiting

CB-04

Oracle failure

Halt trading

πŸ”„ Protective Conversion Controls

Control

Trigger Event

Action

PC-01

Issuer bankruptcy filing

Convert to common stock

PC-02

Custody breach

Convert to common stock

PC-03

Delisting notification

Convert to common stock

PC-04

Material adverse event

Convert to common stock


⚑ Why Mathematical Enforcement Beats Legal Theory


πŸ“œ Securities Law Compliance Framework

A. Howey Test: Embraced, Not Avoided

The Four Prongsβ€”All Satisfied

Unlike avoidance strategies that attempt to "fail" Howey prongs, Category 1 compliance acknowledges and embraces securities classification:

Prong

Traditional Avoidance

Category 1 Approach

1️⃣

Investment of Money

Claim "format change" not investment

βœ…

Acknowledge:

Investors pay for equity

2️⃣

Common Enterprise

Claim "separation"

βœ…

Acknowledge:

Investors share in company

3️⃣

Expectation of Profits

Claim "entertainment"

βœ…

Acknowledge:

Equity investment implies profit expectation

4️⃣

Efforts of Others

Claim "community driven"

βœ…

Acknowledge:

Company management drives value

Why This Is Better

Avoidance Risk

Compliance Benefit

🚨 SEC enforcement action

βœ… Operating within SEC framework

🚨 Investor lawsuits for misrepresentation

βœ… Clear securities disclosure

🚨 Criminal fraud charges if theory fails

βœ… Good faith compliance

🚨 Market exclusion by institutions

βœ… Institutional participation enabled

🚨 Reputational damage

βœ… Regulatory legitimacy


B. Regulation D 506(c) Compliance

ST22 Tokenized Securities are offered under Regulation D Rule 506(c):

Requirement

Implementation

Status

πŸŽ–οΈ

Accredited Investors Only

All purchasers must verify accredited status

βœ…

βœ…

Verification Required

Third-party accreditation verification

βœ…

πŸ“’

General Solicitation Permitted

May publicly advertise offering

βœ…

πŸ“‹

Form D Filing

Filed with SEC within 15 days

βœ…

🚫

Bad Actor Check

Disqualification verification

βœ…

Accredited Investor Qualification (SEC Rule 501)

Qualification

Criteria

πŸ’°

Individual Income

$200,000+ annually for past 2 years (or $300,000 joint)

🏦

Net Worth

$1,000,000+ excluding primary residence

πŸ“œ

Professional License

Series 7, 65, or 82 holder

🏒

Entity

$5,000,000+ in assets

πŸ›οΈ

Institutional

Banks, broker-dealers, insurance companies, RIAs


C. Additional Compliance Requirements

Requirement

Implementation

πŸ’΅

Bank Secrecy Act

Full AML program, SAR/CTR filing

🚫

OFAC Sanctions

Real-time screening via Transfer Hooks

πŸ“Š

Record Keeping

7-year transaction record retention

🏦

Transfer Agent

Empire Stock Transfer coordination

πŸ“‹

Form D Maintenance

Annual amendments as required


πŸ—οΈ Implementation Framework

Phase 1: Issuer Onboarding

Step

Action

Compliance Function

1

Board Resolution

Direct issuer authorization (Pillar 1)

2

Certificate of Designation

Official shareholder register (Pillar 2)

3

Legal Review

Securities compliance verification

4

Due Diligence

Issuer background verification

5

Agreement Execution

Tripartite Agreement signing


Phase 2: Share Custody

Step

Action

Compliance Function

1

CUSIP Assignment

Clear ownership chain (Pillar 5)

2

Share Deposit

Empire Stock Transfer custody (Pillar 3)

3

Golden Medallion

Authentication guarantee

4

Oracle Integration

Real-time custody verification

5

Verification Confirmation

1:1 backing confirmed


Phase 3: Token Minting

Step

Action

Compliance Function

1

Smart Contract Deployment

Transfer Hook controls active

2

Token Minting

1:1 with custodied shares (Pillar 4)

3

Control Verification

All 42 controls tested

4

CEDEX Listing

Trading venue activation

5

Issuer Purchase

40% liquidity pool funding


Phase 4: Ongoing Compliance

Requirement

Frequency

Responsible Party

🏦

Custody Verification

Continuous (~400ms)

Transfer Hook Oracle

πŸŽ–οΈ

Accreditation Check

Per transaction

KYC Provider

🚫

OFAC Screening

Per transaction

Transfer Hook

πŸ“Š

Wallet Limits

Per transaction

Transfer Hook

πŸ”΄

Circuit Breakers

As triggered

Transfer Hook

πŸ“‹

Record Keeping

Continuous

Compliance System

πŸ“œ

Form D Updates

As required

Legal Department


πŸ›‘οΈ Investor Protection Architecture

Category 1 Protections vs. "Shield" Theories

Protection Type

"Shield" Theory (Rejected)

Category 1 Compliance (Adopted)

βš–οΈ

Legal Basis

Untested legal theories

Established securities law

πŸ›‘οΈ

Enforcement

Rely on court acceptance

Mathematical enforcement

πŸ’°

Investor Recourse

None (not securities)

Full securities law remedies

πŸ›οΈ

Regulatory Standing

Uncertain

Clear compliance framework

πŸ“‹

Documentation

Disclaimers

Securities disclosures


What Category 1 Protects Against

Risk

Protection Mechanism

🎭

Fraud

Securities anti-fraud provisions (Rule 10b-5)

πŸ’°

Misappropriation

Regulated custody at Empire Stock Transfer

πŸ“‰

Market Manipulation

Circuit breakers + wallet limits

πŸƒ

Rug Pulls

1:1 backing + protective conversion

πŸ‹

Whale Concentration

4.99% wallet limits

🚫

Sanctions Evasion

Real-time OFAC screening

πŸ“Š

Information Asymmetry

Securities disclosure requirements


What Category 1 Does NOT Protect Against

Risk

Investor Responsibility

πŸ“‰

Market Losses

Investment can lose value

🏒

Issuer Failure

Underlying company may fail

πŸ’§

Liquidity Risk

May not be able to sell at desired price

πŸ“Š

Volatility

Prices may fluctuate significantly

πŸ”§

Technology Risk

Smart contracts may have vulnerabilities

⚠️ Important: Category 1 compliance provides regulatory protections and compliance infrastructureβ€”it does NOT guarantee investment returns or protect against market losses.


πŸ“Š OTCM Utility Token: Separate Classification

Distinct Regulatory Treatment

The OTCM Utility Token is a completely separate instrument from ST22 Tokenized Securities:

Factor

ST22 Tokenized Securities

OTCM Utility Token

βš–οΈ

Classification

SECURITIES

Utility Token

πŸ“œ

Framework

SEC Category 1

Utility token analysis

πŸ’Ž

Backing

1:1 Preferred Series "M"

None

🏦

Custody

Empire Stock Transfer

User wallets

πŸŽ–οΈ

Restrictions

Accredited investors only

None

πŸ”§

Function

Equity ownership

Governance, fees, staking

OTCM Utility Token Characteristics

Characteristic

Description

πŸ—³οΈ

Governance

DAO voting rights

πŸ’Έ

Fee Discounts

10-50% trading fee discounts

🏦

Staking

8-40% APY from protocol fees

πŸ”“

Premium Features

Access to premium platform features

🚫

No Backing

Explicitly has

no asset backing

⚠️ Critical Distinction: The OTCM Utility Token is NOT a security and is NOT covered by the Category 1 framework. It has no asset backing and should not be confused with ST22 Tokenized Securities.


🎯 Why Category 1 Compliance Is Superior

Strategic Advantages Over Avoidance Approaches

Advantage

Description

βš–οΈ

Regulatory Clarity

Operating within clear SEC framework, not testing untested theories

🏦

Institutional Access

Institutions can participate in compliant securities infrastructure

πŸ›‘οΈ

Investor Protection

Full federal securities law protections apply

πŸ“Š

Market Credibility

Securities market legitimacy vs. "meme token" perception

🎯

Target Market Fit

Serves serious investors seeking liquidity, not speculators

πŸ’Ό

Professional Standards

Institutional-grade compliance infrastructure

πŸ”„

Sustainable Model

Long-term viability within regulatory framework


Risk Comparison

Risk Category

Avoidance Approach

Category 1 Compliance

🚨

Enforcement Risk

Highβ€”theories untested

Lowβ€”operating within framework

βš–οΈ

Legal Risk

Highβ€”could be deemed securities anyway

Lowβ€”already classified as securities

πŸ›οΈ

Regulatory Risk

Highβ€”guidance could change

Lowerβ€”established securities law

πŸ“Š

Market Risk

Highβ€”institutional exclusion

Lowerβ€”institutional participation enabled

πŸ”„

Operational Risk

Highβ€”constant legal uncertainty

Lowerβ€”clear compliance requirements


πŸ“š Regulatory References

Primary Authorities

Reference

Citation

[1]

SEC Tokenized Securities Joint Statement (PRIMARY AUTHORITY).

https://www.sec.gov/newsroom/speeches-statements/corp-fin-statement-tokenized-securities-012826 β€” January 28, 2026

[2]

SEC v. W.J. Howey Co., 328 U.S. 293 (1946) β€” Investment contract test

[3]

Regulation D, 17 CFR Β§ 230.501-506 β€” Private offering exemption

[4]

SEC Rule 501 β€” Accredited investor definition

[5]

SEC Rule 10b-5 β€” Anti-fraud provisions

[6]

Bank Secrecy Act β€” AML requirements

[7]

OFAC Sanctions Programs β€” Sanctions compliance


⚠️ Important Disclaimers

Disclaimer

Description

πŸ“‹

Not Legal Advice

This document does not constitute legal advice

πŸ‘¨β€βš–οΈ

Counsel Recommended

Consult qualified securities counsel

πŸ”„

Subject to Change

Regulatory framework may evolve

πŸ“Š

No Guarantees

Compliance does not guarantee investment returns

βš–οΈ

Individualized Analysis

Securities law requires case-specific analysis

Investment Risks

Risk

Description

πŸ’Έ

Total Loss

You may lose your entire investment

πŸ“‰

Market Risk

Values may decline significantly

🏒

Issuer Risk

Underlying companies may fail

πŸ’§

Liquidity Risk

May not be able to sell when desired

πŸ”§

Technology Risk

Smart contract vulnerabilities may exist

⚠️ ST22 Tokenized Securities are securities under federal securities laws. Investing in securities involves substantial risk including possible loss of your entire investment. Category 1 compliance provides regulatory protections but does NOT guarantee against investment losses.


πŸ“‹ Document Information

Field

Value

πŸ“„

Document Version

3.0

πŸ“…

Last Updated

January 2026

πŸ“

Jurisdiction

Federal (United States)

πŸ›οΈ

Primary Authority

SEC Category 1 Joint Statement (January 28, 2026)

πŸ”„

Supersedes

"Howey Shield" Framework (deprecated)


πŸ“‹ Conclusion

The Category 1 Advantage

The SEC Category 1 Compliance Framework represents a fundamental strategic shift from attempting to avoid securities classification to embracing securities compliance:

Old Approach (Deprecated)

New Approach (Adopted)

❌ Engineer around Howey Test

βœ… Satisfy Howey Test, embrace securities status

❌ Untested legal theories

βœ… Established SEC framework

❌ "Meme token" positioning

βœ… Tokenized securities infrastructure

❌ Regulatory arbitrage

βœ… Regulatory compliance

❌ Institutional exclusion

βœ… Institutional participation

❌ Enforcement risk

βœ… Compliance certainty

Core Principle

πŸ’‘ OTCM Protocol operates SEC Category 1 compliant tokenized securities infrastructureβ€”providing regulatory clarity, institutional credibility, and investor protection through established securities law rather than untested legal theories.


Β© 2026 OTCM Protocol, Inc. | All Rights Reserved

ST22 Tokenized Securities are securities under federal securities laws pursuant to SEC Category 1 (Issuer-Sponsored Tokenized Securities) framework. The "Howey Shield" framework is deprecated and has been replaced by SEC Category 1 compliance.