September 18, 2025
September 8, 2026
Author: JoĂŁo Lages
A European securitisation can fail before the first investor sees it. The problem is often not the token, the note or the placement process in isolation. It is a mismatch between the legal structure that creates the exposure and the investment-service rules that govern how the instrument reaches investors.
MiFID II does not turn receivables into securities, create a special purpose entity or allocate credit losses between tranches. Those questions sit primarily under the EU Securitisation Regulation, company and insolvency law, the transaction documents and the law governing the underlying claims. MiFID II becomes central when an investment firm manufactures or distributes the resulting financial instrument. That distinction determines who owns each compliance task, which evidence must exist before launch and whether a proposed digital distribution model is workable.
The first decision is whether the transaction meets the legal definition of a securitisation. Under Article 2 of Regulation (EU) 2017/2402, the credit risk associated with an exposure or pool of exposures must be tranched. Payments depend on the performance of those exposures, and subordination determines how losses are distributed during the life of the transaction.
Those elements are cumulative and more precise than the market habit of calling any asset-backed note a securitisation. A bond issued by one operating company, even if its proceeds finance a particular project, is not automatically a securitisation. Nor is a token linked to a single property, loan or revenue stream. The answer turns on the transfer or assumption of credit risk, the payment mechanics and the loss hierarchy, not on whether the instrument is recorded on a distributed ledger.
This is the first practical decision point. If the structure is a true securitisation, the parties must allocate the originator, sponsor, original lender, servicer and securitisation special purpose entity roles, then satisfy the sector-specific requirements. If it is instead a corporate note, participation instrument or another transferable security, a different legal analysis applies. MiFID II may govern distribution in either case, but it does not resolve the initial classification.
Consider a pool of SME invoices transferred to a bankruptcy-remote special purpose entity. The entity issues senior and junior notes. Collections enter a controlled account, fees are paid, senior interest and principal are serviced, and residual cash flows reach the junior tranche. Credit enhancement may come from overcollateralisation, reserves or subordination. The junior tranche absorbs losses first.
That short description contains the mechanics investors actually underwrite. The documents need to answer:
A token cannot repair a weak assignment, an unenforceable security package or unreliable servicing data. It can record ownership and automate permitted transfers, but investor claims still depend on the off-chain legal and operational chain.
For an in-scope EU transaction, three obligations shape the operating model.
EU institutional investors must perform and document the checks required by Article 5 of the Securitisation Regulation. They need to verify, among other matters, risk retention and the availability of required information. This is not satisfied by a distributor’s marketing deck. The data room, reporting cadence and contractual access rights must support the investor’s own assessment before it holds the position and while it remains invested.
The originator, sponsor or original lender generally must retain a material net economic interest of at least 5% on an ongoing basis under Article 6. The chosen retention method should match the economics and be disclosed accurately. A nominee wallet or technical custody arrangement does not change who bears the retained economic exposure.
Article 7 requires specified information to be made available to holders, competent authorities and, on request, potential investors. The responsible parties must agree who produces loan-level data, investor reports, inside-information disclosures and significant-event notices. A private placement is not a disclosure-free transaction. Its reporting route may differ from a public securitisation, but the underlying duty remains.
The simple, transparent and standardised, or STS, designation is optional and subject to separate criteria and notification. It is not a regulatory approval, credit rating or guarantee. Teams should decide early whether the structure can meet the applicable STS conditions because the decision affects asset eligibility, documentation, verification work and investor analysis.
Once the notes are financial instruments and an investment firm is designing, recommending, placing or executing transactions in them, MiFID II conduct and organisational requirements become material. The current consolidated MiFID II text and national implementing rules must be read with the relevant delegated measures and supervisory guidance.
The manufacturer must identify a sufficiently granular target market, assess whether the product meets the identified clients’ needs and define a compatible distribution strategy. A distributor must understand the product, identify its own target market and test the strategy against information about its clients. ESMA’s MiFID II product-governance guidelines make clear that this is a life-cycle process, not a one-time launch form.
For securitisation notes, the target-market analysis should engage with the actual structure: tranche seniority, expected maturity, prepayment and extension risk, loss allocation, liquidity, valuation sources, data availability and the consequences of servicer or counterparty failure. Describing a tranche merely as “income” or “alternative investment” is too broad to support a defensible distribution decision.
A common mistake is to treat suitability and appropriateness as interchangeable product approvals. They are client-and-service tests.
When an investment firm gives investment advice or provides portfolio management, it must obtain enough information about the client’s knowledge and experience, financial situation, ability to bear losses, investment objectives and risk tolerance to make a suitability assessment. For certain non-advised services, the firm may instead need to assess appropriateness by considering whether the client has the knowledge and experience to understand the risks. Execution-only treatment is narrow and should not be assumed for a complex securitisation instrument.
Client categorisation matters, but professional status does not eliminate product governance, conflicts, fair communications or every conduct obligation. Eligible-counterparty treatment is also service-dependent. The distributor should map each obligation to the client category, service, channel and jurisdiction rather than rely on a single “professional investors only” label.
The second major decision point is the intended offering perimeter. A public offer of securities in the EEA or admission to trading on an EU regulated market can trigger the Prospectus Regulation, subject to its scope and exemptions. An exemption from publishing a prospectus does not switch off MiFID II product governance, client assessment or communication rules.
If the instrument is made available to retail investors and falls within the packaged retail and insurance-based investment products regime, the manufacturer may need a key information document under the PRIIPs Regulation before the product is offered. The product’s complexity, data demands and secondary-market limits may make a professional-only placement more realistic, but that is a commercial and regulatory design choice rather than a shortcut.
The distribution plan should therefore be set before finalising the instrument. Retail access, professional placement, regulated-market admission and private bilateral distribution create different combinations of disclosure, governance, assessment and operational work.
Tokenisation can improve the operating model when the ledger record, legal register and transaction documents are aligned. It can support controlled issuance, auditable transfers, position reconciliation and programmable payment events. It also creates new control questions.
These questions should be resolved in the legal-to-technical specification. Teams building a European distribution stack can use Lympid’s white-label investment platform where its regulated distribution and operating scope fit the instrument, target investors and jurisdiction. That infrastructure does not replace the originator, sponsor, SSPE, arranger, legal counsel or servicer, and it does not determine whether the transaction is a securitisation.
An originator transfers a diversified pool of receivables to an SSPE. Senior and junior notes receive cash according to a documented waterfall, with subordination determining loss allocation. This is the type of structure that may meet the EU securitisation definition. The team must address risk retention, Article 7 transparency, institutional-investor due diligence support, servicing, cash control and tranche-level product governance before distribution begins.
An operating company issues one class of notes whose return depends on revenue from a single project. There is no tranching of credit risk and no subordinated class that determines how losses are distributed. The note may be a transferable security and may still require a prospectus or MiFID II-compliant distribution, but it is not automatically a securitisation. Calling it one could assign the wrong compliance work and confuse investors about the source of repayment.
The distinction also matters when choosing technology. A European tokenized-securities platform must control issuance, investor eligibility and transfers according to the actual instrument. For transactions built on receivables, the separate analysis of tokenized lending contracts and off-chain servicing explains why data and collection controls remain decisive.
A workable programme assigns evidence, not just titles.
A sound European securitisation programme answers four questions in order. Does the transaction meet the legal definition of securitisation? What rights and cash-flow mechanics does each instrument create? Which entities manufacture, distribute and service it? Which investor categories, services and jurisdictions are in scope?
Only after those answers are documented should the team finalise the ledger design, onboarding journey and placement process. The purpose of MiFID II in this context is not to validate the securitisation. It is to govern how investment firms design and distribute the financial instrument in the client’s interests. Keeping that boundary clear turns a broad compliance exercise into an accountable operating model.
Book a call with us today and get a free assessment.
