SEC Transfer Agent Rules and Tokenised Funds: Who Maintains the Register?

Section 40 of the Companies Act (2025 Revision) requires every Cayman company to keep a register of its members in writing, and section 48 makes that register prima facie evidence of who holds its shares. Tokenisation displaces neither provision. It changes where the record can sit and who maintains it. The SEC transfer agent rules proposed on 1 September 2026 describe, in regulatory language, the controls expected of whoever keeps that record, and tokenised funds will be measured against them whatever their domicile. This article sets out which record is the legal register, who is accountable for maintaining it, and how a board evidences that the ledger and the register agree.

Every tokenised fund proposal we review runs into the same first question, and it is never about the technology. It is which document says where the register of members sits, and whether the other documents agree with it. In our experience the failure is almost never the ledger. It is that the offering document, the constitutional documents and the technology agreement describe three different arrangements, and nobody notices until an allocator asks. A board that can point to one approved register policy, one reconciliation process and one named owner of transfer restrictions has answered most of what operational due diligence will ask.

David Lloyd, Chief Executive Officer at CV5 Capital

Executive Summary

The register of members is the legal record of ownership in a Cayman fund. A tokenised fund can be built so that the on-chain record is that register, or so that an off-chain register remains the legal record and the token represents an interest entered in it. Both models work. Ambiguity between them does not, and it is the most common defect in tokenised fund documentation.

• Cayman statute requires the register of members to be kept and treats it as prima facie evidence of holdings, whatever technology records it.
• The 2026 amendments to the mutual funds and private funds regimes define a token as a digital representation of the whole of an investor interest, and make transfers subject to operator approval.
• The SEC proposal does not bind a Cayman fund, but it is the clearest published articulation of the controls expected of a party keeping an ownership record on a distributed ledger.
• Allocators, auditors and counterparties will borrow that vocabulary in operational due diligence whatever the fund's domicile.
• The board's obligation is evidential: a register policy, a documented reconciliation, minuted oversight of any delegate and a named owner of transfer-restriction logic.

Which Record Is the Legal Register of Members?

Section 40(1) of the Companies Act (2025 Revision) requires every company to cause a register of its members to be kept in writing. The register must record the names and addresses of members, the shares held by each, the amount paid, the number and category of shares, whether those shares carry voting rights, and the dates on which each person became and ceased to be a member. Section 48 provides that the register is prima facie evidence of the matters the Act directs or authorises to be entered in it. Section 44(1) allows an exempted company to keep the register at a place within or outside the Islands.

Those provisions describe a record and its evidential weight. They do not prescribe a medium, and they do not name the party who keeps it. That is why tokenisation raises a governance question rather than a permission question. Our companion analysis of how the official register operates in a tokenised fund sets out the mechanics of each.

What is not workable is a structure in which the answer differs depending on which document is read. The offering document, the constitutional documents, the administration agreement and the technology agreement must describe the same arrangement. Where they do not, the fund has no reliable answer to the only question that matters in a dispute, which is whose record governs. The point is sharper in a segregated portfolio company, because section 217(1) provides that segregated portfolio shares are issued in respect of a designated portfolio, and the register records the category of shares each member holds.

What the SEC Has Proposed

On 1 September 2026 the US Securities and Exchange Commission proposed a modernisation of the rules and forms applying to registered transfer agents. The proposing release was published in the Federal Register on 4 September 2026 under file number S7-2026-30, and the comment period closes on 3 November 2026. Commissioner Mark Uyeda's accompanying statement records that it has been forty years since the Commission last significantly updated these rules, and describes the period since its 2015 concept release as a piecemeal approach that gave neither clarity nor predictability.

The substance is unremarkable to anyone who runs a registrar function, which is precisely why it is useful. The proposal treats electronic and blockchain-based recordkeeping as ordinary regulated business, then asks the ordinary questions: who holds the record, what policies govern it, how is it protected, and what happens when the system fails.

Rules 17ac2-1, 17ac2-2 and 17ad-11 would also be amended. The proposal is at consultation stage, and a proposal is not a rule. Its value to a non-US board lies in what it makes explicit.

Why a US Proposal Matters to a Cayman Board

A Cayman fund is not subject to the SEC's transfer agent rules unless it or a service provider is registered with the Commission in that capacity. The proposal nonetheless matters, for a reason unrelated to jurisdiction. It is the clearest description yet, in operative regulatory language, of what competent stewardship of an ownership record on a distributed ledger looks like. Allocators and operational due diligence teams borrow whichever published standard is closest to the question in front of them.

The proposing release states that transfer agents interacting with tokenised securities, distributed ledger technologies and smart contracts must increasingly manage risks relating to blockchain data integrity, the security of tokenised securities and distributed ledger operational models. It adds that those adopting automated technologies must ensure proper controls, accurate representations of system capabilities and effective oversight of automated processes. Read that as a due diligence questionnaire rather than as US rulemaking and its relevance becomes obvious.

The proposed reframing of Rule 17ad-12 is the most portable element. Protection of securities and funds against loss and misuse, monitoring of material operational risk, business continuity, and the treatment of third-party systems on which the function depends: those are the headings under which any register keeper should be able to describe itself. Commissioner Hester Peirce, who confirmed in her statement that she is leaving the Commission and will follow the rulemaking from outside it, also invited comment on whether identifiers such as digital wallet addresses might replace names and physical addresses. That question sits directly on top of the Cayman requirement to record members' names and addresses.

The Cayman Statutory Position for Tokenised Funds

Cayman legislated for tokenised funds before this proposal appeared. The Mutual Funds (Amendment) Act, 2026 and the Private Funds (Amendment) Act, 2026 both received assent on 19 March 2026, and our analysis of the 2026 statutory framework for tokenised Cayman funds examines them in full. Two definitional choices in those Acts decide most of the governance questions that follow.

First, a digital equity token or digital investment token is defined as a digital representation of the whole of an equity or investment interest held by an investor in the fund. The token represents the interest. It is not a separate species of property sitting alongside the interest, and it is not a fraction of one. Second, an interest represented by a token is only transferrable with the approval of the operator, in accordance with the offering document. Cayman has not created a bearer instrument that moves freely between wallets. The operator remains the gatekeeper.

The Private Funds (Amendment) Act, 2026 requires the operator of a tokenised private fund to confirm annually to the Authority that all records relating to the issuance, creation, sale, transfer and ownership of a tokenised interest have been properly kept and maintained. The offering document must disclose the risks specific to the token, including cybersecurity and transferability, and set out how they are addressed or mitigated for investors. The Authority may impose restrictions on the characteristics of the token, and may inspect both the underlying technology and token transactions. The Mutual Funds (Amendment) Act, 2026 adopts the same architecture and extends the record-keeping expectation to the licensed administrator.

The accountability question therefore has a statutory answer in Cayman even where the question of medium does not. Whoever holds the keys, the operator confirms the records, approves the transfers and answers to the Authority. A structure that hands effective control of transfers to a smart contract without a corresponding approval mechanism is not consistent with that design.

Four Operational Questions the Board Must Settle

For a fund established on a Cayman segregated portfolio platform, or on any comparable structure, the operational work divides into four groups, each with a documentary output that an auditor or an allocator can be shown.

1. Which record is the register

Settle the model first and draft to it. The offering document, the constitutional documents, the administration agreement and the technology agreement must give the same answer, and that answer must survive translation into the token contract. Where a third party maintains the record, the appointment, the scope of responsibility, the liability allocation and the audit rights belong in the agreements rather than in a technical specification.

2. Reconciliation

Where the ledger mirrors an off-chain register, the fund needs a documented reconciliation between the two, with a defined frequency, an exception process and an explicit rule as to which record prevails on a discrepancy. Where the ledger is the register, it needs a documented correction process, a procedure for lost or compromised keys, and a method of evidencing holdings to the auditor at a valuation point. The interaction with dealing and valuation is examined in our analysis of transfer agency and NAV mechanics in an operating tokenised fund.

3. Transfer restrictions

Proposed Rule 17ad-31 formalises the transfer agent's responsibility for restrictive legends and for a reasonable basis before facilitating certain transactions. The on-chain analogue is the restriction logic in the token contract: allowlisting, eligibility testing, lock-ups and any forced transfer capability. Those controls need a named owner, a change-control process and a tested override, and the compliance function must understand how they interact with onboarding and with anti-money laundering checks on secondary transfers.

4. Continuity and third-party risk

A tokenised fund depends on a chain, a contract, a wallet arrangement, a tokenisation platform and the administrator's integration to each. The board should be able to describe what happens to subscriptions, redemptions, valuation and the register if any one of them is unavailable for a week. Bridged or wrapped exposures and single-chain dependencies create correlated operational risk that conventional fund controls were never designed to address, and they belong in the risk register and the custody policy.

The table is illustrative. The governing position for any fund is what its own constitutional and contractual documents say.

Evidencing the Register: Policy, Delegation and Audit

A board retains responsibility for the fund regardless of how the register is kept. Delegation moves the work, not the accountability. The evidential burden is easy to describe and often unmet: the board should be able to produce, on request, the documents showing that it decided the model, understood the delegate's controls and monitored them.

• A written register policy approved by the board, stating which record is the legal register, who maintains it, how it is reconciled, how corrections are authorised and how it is evidenced to the auditor.
• A delegate oversight file covering the register keeper and the technology provider, with the control descriptions received and the questions asked minuted.
• A named owner of transfer-restriction logic, with the change-control record for every amendment to it.
• A continuity assessment addressing the chain, the contract and the wallet arrangement, with the board's conclusion recorded rather than assumed.
• A record of how the register model was described to investors, and of any variation approved since.

The compliance dimension is explicit. CIMA's Rule on Effective Compliance Programme for the Prevention and Detection of Money Laundering, Terrorist Financing and Proliferation Financing, which the Authority has confirmed comes into effect on 18 September 2026, requires a regulated financial services provider to establish and maintain an independent audit function to review and test its compliance programme, and provides that the provider remains ultimately responsible for that programme even where the audit function is outsourced. Our review of CIMA's AML Rule and Sanctions Rule sets out the wider obligations.

For a tokenised fund the consequence is specific. An auditor testing the compliance programme will reasonably ask how eligibility and anti-money laundering requirements are enforced on a secondary transfer, whether that enforcement is automated, who reviews exceptions and what evidence exists that the review occurred. Those are transfer agency questions whichever entity performs the function, and they sit alongside the wallet and permissioning controls discussed in our analysis of board controls over wallets and transfer restrictions.

Where Tokenised Fund Proposals Fail Review

The transfer agent function has become the point at which legal title, transfer restrictions, investor eligibility and settlement finality meet, and that concentration is visible in the market as well as in the rulemaking. On 31 August 2026 Intercontinental Exchange and tZERO announced a memorandum of understanding under which the latter would act as design partner for the digital transfer agent and broker-dealer infrastructure supporting a planned tokenised securities platform, with the exchange group licensing a portfolio of 103 blockchain patents and investing in the current financing round.

Against that backdrop, tokenised fund proposals that fail institutional review tend to fail for the same recurring reasons.

• The documents disagree about which record is the register, and nobody has reconciled them.
• Transfer restrictions exist in code but have no named owner, no change-control record and no tested override.
• Reconciliation is described as continuous because the ledger is continuous, with no exception process and no prevailing-record rule.
• Continuity planning stops at the administrator and never reaches the chain, the contract or the wallet arrangement.
• The operator approval that Cayman law requires for a transfer is assumed to be satisfied by the token contract itself.
• The board has formed a view but has not minuted it, so there is nothing to show an allocator or an auditor.

None of these is a technology problem, and none is expensive to fix before launch. Each is close to unfixable once investors have subscribed and interests have moved. The structural options are set out on the CV5 fund tokenisation page.

Key Takeaways

• Decide the register model before drafting, and make the offering document, constitutional documents, administration agreement and technology agreement say the same thing.
• Adopt a short written register policy at board level covering maintenance, reconciliation, corrections and evidence to the auditor.
• Name the owner of transfer-restriction logic and keep a change-control record for every amendment to it.
• Build the operator approval that Cayman law requires for a tokenised transfer into the process, and evidence it separately from the contract logic.
• Treat the SEC's proposed risk management headings as the checklist an allocator will use, whatever the fund's domicile.
• Extend continuity planning past the administrator to the chain, the contract and the wallet arrangement, and minute the board's conclusion.

Frequently Asked Questions

Do the SEC transfer agent rules apply to a Cayman tokenised fund?

No. The rules apply to transfer agents registered with the US Securities and Exchange Commission. A Cayman fund is outside their scope unless it or a service provider is registered in that capacity. They matter because the September 2026 proposal describes the control expectations that allocators, auditors and counterparties are likely to apply to any party maintaining an ownership record on a distributed ledger.

Can the on-chain record be the register of members of a Cayman fund?

The Companies Act requires a register of members to be kept and treats it as prima facie evidence of holdings, without prescribing the medium or the keeper. A tokenised fund can therefore be structured with the ledger as the register, or with an off-chain register as the legal record that the token represents. Which model applies depends on the fund's own constitutional and contractual documents, and the position should be settled with independent professional advice before launch.

Who maintains the register in a tokenised fund?

Whoever the fund documents appoint. In most structures this remains the administrator acting as registrar and transfer agent, and in some it is a separately appointed digital transfer agent. The Cayman tokenised fund legislation makes the operator responsible for confirming annually to the Authority that the records of issuance, transfer and ownership have been properly kept, so the appointment does not move the accountability.

Can a tokenised fund interest be transferred freely between wallets?

Not under the Cayman framework. The Mutual Funds (Amendment) Act, 2026 and the Private Funds (Amendment) Act, 2026 provide that an interest represented by a token is transferrable only with the approval of the operator, in accordance with the offering document. Any secondary transfer design has to accommodate that approval step rather than rely on the token contract alone.

How does the CIMA AML Rule interact with a tokenised fund's transfer restrictions?

The Rule, in effect from 18 September 2026, requires an independent audit function to review and test the compliance programme, and the regulated provider remains ultimately responsible even where that function is outsourced. For a tokenised fund the audit will reasonably reach the controls that enforce eligibility and anti-money laundering requirements on secondary transfers, including who reviews exceptions and what evidence exists that the review happened.