Roadmap · subject to approvals

XRP Ledger tokenisation: how it works - and why the record comes first.

A plain-English tour of XRP Ledger tokenisation: the primitives, what a token is (a pointer or a regulated instrument) and is not (title), and why verify-first matters. This page describes Property Vault's plans. It is not an offer or a financial promotion.

The context, in sourced figures

9XRP Ledger tokenisation primitives this article relies on - every one live on XRPL mainnetxrpl.org Known Amendments; xrpldashboard, 7 Oct 2026
$2.49bnRLUSD market capitalisation; 52% of supply on the XRP LedgerKuCoin News, 28 Sep 2026; XRPL share Jun 2026
2 Dec 2025Royal Assent of the Property (Digital Assets etc) Act 2025Law Commission, Dec 2025
20 Feb 2026Secondary trading of Dubai Land Department deed tokens on the XRP LedgerDubai Land Department / CoinDesk, Feb 2026

"Tokenisation" is used to mean five different things. This article takes XRP Ledger tokenisation in the order Property Vault intends to build it - a hash, a pointer, a credential, a regulated fraction, a settlement - and says at each step what the XRP Ledger does, what a regulated partner does and what stays off it. The order matters: a token that points at an unverified record points at nothing.

Start with a hash

The cheapest and most honest thing a ledger can do for a physical asset is prove that a document existed, in exactly this form, on a given day. Every file added to a Vault is hashed on upload and given an integrity receipt - the hash plus a timestamp. Once anchoring reaches mainnet, each day's receipts will be combined into a single Merkle root, and that one 32-byte value written to XRPL mainnet in the memo of an AccountSet transaction from Property Vault's own account.

No per-asset object, no personal data, no address or serial - at most one hash a day, committing to every receipt of that day, and none on a day when nothing changed. Anyone holding a receipt can recompute the path from their document to the root and check it against the public ledger, which is what the verifier will do. The ledger adds what a company's own signature cannot: a public, independent timestamp that nobody, Property Vault included, can rewrite.

Anchoring integrity receipts to the XRP Ledger Six integrity receipts are hashed in pairs into a Merkle tree; the single root hash is written in the memo of one AccountSet transaction on the XRP Ledger (today a rehearsal on the testnet). Documents and personal data never leave Property Vault. Integrity receipts (off-ledger) a91f… 3c0e… 7b2d… e44a… 0d9c… f17b… survey · EICR · invoice · certificate · valuation · photo set h(a,b) h(c,d) h(e,f) h(…) h(…) Merkle root XRP Ledger · testnet Rehearsal · at most one a day TransactionType: "AccountSet" Memos: [{ MemoType: "pv/anchor/v1", MemoData: "9f3a…c71e" }] validated: true No address. No name. No file. Just the root.
One root, one memo, on days when a record has changed. The documents stay with the Vault; only the commitment is public.2

Launching Integrity anchoring runs as a rehearsal on the XRPL testnet: Merkle roots of keyed commitments are written to the test network, which can be reset, and listed on the public anchor page; mainnet anchoring is on the roadmap, subject to approvals. Anchoring on mainnet and the public verifier are the first ledger milestone.

A pointer, not a deed: the XRPL NFT pointer

The second step gives each asset something on the ledger that can be pointed at. The XRP Ledger has had native non-fungible tokens since 31 Oct 2022 (XLS-20), and since 11 Jun 2025 (XLS-46, DynamicNFT) a token can be mutable, so its URI follows the record as it grows. Property Vault's XRP Ledger tokenisation design uses exactly that: one pointer token per Vault ID, the digital asset identity, its taxon set to the asset class, its URI pointing at the Vault's manifest - a short, versioned description of the record whose current hash the pointer attests to.

Two limits keep the word "pointer" honest. The manifest sits behind a scope, so nothing reachable from the ledger reveals a UPRN, address, registration or serial. And the pointer is not title: if it and the statutory register of title ever disagree, the register wins and the pointer is corrected.

Two identity primitives sit around it. A Decentralised Identifier (XLS-40, live 30 Oct 2024) gives Property Vault, and later each registered professional, a DID on the ledger. Credentials (XLS-70, live 4 Sep 2025) let one account make a signed statement about another: Property Vault would issue a registered-professional credential to an electrician's account, by reference to the scheme membership they already hold, and withdraw it when that membership ends.

This is where drafts of "verified history on-chain" go wrong. An XLS-70 credential binds an issuer account to a subject account, not to a token - the right tool for registering who may say things, the wrong tool for the events themselves. A credential from a gas engineer's account to a homeowner's account about an identifiable property would put personal data on a public ledger. Instead, each verified event is a hash inside the record, referenced from the pointer's manifest, so history travels with the asset, not with any account.

Pointer token · per Vault IDXLS-20 / 46
NFTokenTaxon
1 · asset class: Property
Flags
tfTransferable · tfMutable
URI
https://…/m/PV-GB-…/v12 scope-gated
Manifest hash
sha256: 4e1b…9a07
Holds
A pointer to the record - never title or a natural key
Status: testnet after the data-protection impact assessment, then mainnet.
Credential · issuer registrationXLS-70
Issuer
rPV… · Property Vault
Subject
rEL… · a registered electrician
CredentialType
registered-professional/electrical
Expiration
scheme membership end
Binds
Account to account - it registers the issuer, never an event
Account-bound by design: never written about an identifiable asset.

XRPL RWA tokenisation: fractions, through a regulated issuer

The third step is what most people mean by tokenisation - dividing economic ownership of an asset into fungible units - and it is the step Property Vault does not perform. A fractional interest in a house, a painting or a cask is usually a regulated investment; issuing, promoting and trading it belong to an FCA-authorised issuer or a Digital Securities Sandbox participant, working through a special-purpose vehicle or a trust. What follows is how such an issuer would use the ledger - not what Property Vault offers.

The XRP Ledger does this without a smart contract. Multi-Purpose Tokens (XLS-33, live 1 Oct 2025) are fungible tokens with protocol-level controls: RequireAuth so only approved accounts may hold them, lock and clawback so an issuer can halt transfers or recover units under a court order, and 1,024 bytes of metadata for the legal wrapper and a link to the pointer token. Permissioned Domains (XLS-80, live 4 Feb 2026) define who counts as approved - a set of credential types from named issuers, such as a KYC provider. The Permissioned DEX (XLS-81, live 18 Feb 2026) gives domain members their own order book, so transfers happen only between parties the issuer's rules admit - for XRP and trust-line tokens today; an MPT can trade there only once the MPT DEX amendment (XLS-82), not yet enabled, activates. Token Escrow (XLS-85, live 12 Feb 2026) holds units or stablecoin against a condition, such as a completion payment.

Settlement would run in RLUSD, the dollar stablecoin issued on the ledger, so a completion does not move with a volatile price; XRP supplies liquidity and pays fees and reserves. One implementation note: pointing an MPT issuance at a Permissioned Domain through its DomainID field is documented as requiring the SingleAssetVault amendment, still in validator voting; until it activates, per-holder MPTokenAuthorize does the same job one account at a time.

0

Verified record

Vault ID, Verified History and a clean statutory record - the eligibility data an issuer reads first.

Property Vault
1

Issue the MPT

Units per SPV or trust; RequireAuth, lock and clawback set before first issuance.

Regulated issuer · XLS-33
2

Gate the holders

A Permissioned Domain accepts only KYC credentials from approved issuers. No credential, no balance.

Issuer · XLS-80 / XLS-70
3

Transfer and settle

Domain-gated order book, escrow for completions, settlement in RLUSD.

Venue · XLS-81 / XLS-85
XRPLthe ledgerRLUSDthe settlement assetXRPliquidity, fees and reserves
Not an offer Launching through regulated partners, subject to regulatory approvals. This page describes a product in development. It is not an offer or a financial promotion. Promotion of investments in the UK is restricted (s21 FSMA; the cryptoasset financial-promotions regime in force since 8 Oct 2023); any offer is made by a regulated issuer, not here.

XRP Ledger tokenisation primitives, with dates

PrimitiveStandard · live on mainnetWhat it does in this designWho operates it
Transaction memoCore protocolCarries the Merkle root (AccountSet)Property Vault
Non-fungible tokenXLS-20 · 31 Oct 2022The pointer token, one per Vault IDProperty Vault
DynamicNFTXLS-46 · 11 Jun 2025Lets the pointer's URI follow the recordProperty Vault
Decentralised IdentifierXLS-40 · 30 Oct 2024A DID for Property Vault and for registered professionalsProperty Vault
CredentialsXLS-70 · 4 Sep 2025Issuer registration; KYC gating for a partner's domainProperty Vault · KYC provider
Multi-Purpose TokenXLS-33 · 1 Oct 2025Fungible units with RequireAuth, lock and clawbackRegulated issuer
ClawbackLive 8 Feb 2024Recovery after a court order, fraud or lost keysRegulated issuer
Permissioned DomainXLS-80 · 4 Feb 2026Defines the approved holder set by credentialRegulated issuer
Permissioned DEXXLS-81 · 18 Feb 2026Order books open only to domain membersRegulated venue
Token EscrowXLS-85 · 12 Feb 2026Conditional deposits and completion paymentsRegulated issuer or venue

Status as of 7 Oct 2026 (xrpl.org Known Amendments; xrpldashboard). Items in voting are listed below.

What stays off-ledger

Why put anything on a public ledger, and what exactly? An XRPL engineer and a data-protection officer ask the same question, and the answer is a short list on the ledger and a long list off it. Documents stay off because a survey runs to megabytes and an NFT URI holds 256 bytes; personal data because the UK GDPR right to erasure cannot be honoured on a public chain; natural keys because they would turn the pointer into a public lookup; scores because they are recomputed whenever the evidence changes; and legal title because it lives in the statutory register.

Stays with the Vault (off-ledger)

  • Documents, photographs and certificates, hashed on upload
  • Personal data, including KYC content
  • Natural keys: UPRN, title number, VIN, VRM, hull number, serial, cask number
  • Scores and their inputs; valuations
  • Every verified event, as a hash in the record

Legal title stays in the statutory register. The register wins on any conflict.

Written to the XRP Ledger

  • Anchoring - one Merkle root in one AccountSet memo, on days a record changes (launching)
  • Pointer token per Vault ID, URI scope-gated (testnet after the DPIA)
  • DIDs and issuer-registration credentials - account to account, no asset named
  • A partner's MPTs, domains, escrows and RLUSD settlement - operated by the regulated issuer or venue

Property Vault never holds keys, client money or physical goods, and never issues a token or stablecoin of its own.

The law, stated correctly

Four pieces of law and policy are quoted around XRP Ledger tokenisation more often than they are read.1

The 2025 Act. The Property (Digital Assets etc) Act 2025 (Royal Assent 2 Dec 2025) confirms that a digital token can be property in its own right - a third category of personal property. It does not link a token to a home, car or watch - that link is contractual. Only the agreement and the record behind a token make it mean anything about a house.

The Digital Securities Sandbox. The Bank of England and FCA Digital Securities Sandbox has been live since 8 Jan 2024 and runs to 2029; the Bank and the FCA were working with 16 firms in it in May 2026 (Bank of England, 18 May 2026); HSBC (13 Jul 2026) and ClearToken (18 Sep 2026) have passed Gate 2. CurveBlock, the first entrant focused on real-estate development fund tokenisation (Gate 1, May 2025), is Leeds-based. Its participants are the kind of issuer the third step assumes.

MiCA. MiCA's crypto-asset service provider regime has applied across the EU since 30 Dec 2024, with transitional periods ending by 1 Jul 2026. It does not cover tokenised securities (MiFID) or unique NFTs.

Dubai. The Dubai Land Department issues its own title-deed tokens on the XRP Ledger through a licensed platform (Phase 1, May 2025; secondary trading, 20 Feb 2026). It proves the ledger carries registry-grade tokens. It also shows the condition: the deed tokens work because the registrar itself is the issuer.

What is still in voting: XLS-65 and the XLS-66 lending protocol

Three amendments matter to the later chapters and none has an activation date. Each activates only after more than 80% of trusted validators vote yes for two continuous weeks, so the phrase for all three is "when activated".

  • Single Asset Vault · XLS-65Pooled liquidity with vault shares - and the amendment the MPT DomainID field is documented to depend on.In voting · 57% on 7 Oct 2026, 80% needed
  • Lending Protocol · XLS-66Fixed-term loans from vault liquidity with terms, repayments and defaults on the ledger. Supported when it activates; until then regulated lenders assess Vaults through the Vault API - see how borrowing against verified assets is planned.In voting · 48%, 80% needed
  • ConfidentialTransferEncrypted balances and amounts with a public supply check - relevant later to private ownership of high-value items.In voting · 51%, 80% needed

Validator support as of 7 Oct 2026 (xrpldashboard). Percentages move; the rule does not.

Where Property Vault sits in XRP Ledger tokenisation

Property Vault's position is the layer underneath all five meanings. The Vault ID is one permanent identity per asset. The Verified History is every event, document and owner, sealed on upload and graded by who issued it. The Vault Score is a verification score - whether the documents exist, who issued them and that they are unaltered since issue; never a valuation, a credit input or a judgement of the work. Tokenisation - whole, as a pointer; or fractional, as a regulated instrument - is offered only by FCA-authorised issuers or Digital Securities Sandbox participants for assets that meet a minimum Vault Score and a clean statutory record. Property Vault supplies the Vault ID, Verified History, Vault Score and eligibility data; it never hosts an offer, gates holders, runs a venue, holds keys or moves money.

That is why, in XRP Ledger tokenisation, the record comes first. Tokenised property failed when the record went stale - unpaid taxes, blight and litigation (RealT, Jul 2026); illiquidity (USDR, Oct 2023). A live record fed by institutional data is the fix - the layer Property Vault builds. The primitives are ready; the discipline is to use them in order. More on the asset tokenisation platform, RWA tokenisation through Property Vault Markets, the Vault API, tamper-evident documents and security and real-world asset infrastructure for investors. The tokenise-to-lend flow has been run end to end on XRP Ledger test networks: see the XRPL testnet tokenisation demo (no real assets, money or offers).

1 Sources: xrpl.org Known Amendments, xrpldashboard.com (7 Oct 2026); KuCoin News (28 Sep 2026; Jun 2026); Dubai Land Department, CoinDesk (May 2025; Feb 2026); Law Commission (Dec 2025); Bank of England notices (2026); UKTN (May 2025); HLC / Zyphe (2026); FCA PS23/6; realopen.com (Jul 2026); The Block (Oct 2023).

2 The Vault Score method is the Homes pilot's published rules (Property Vault, 7 Oct 2026). Transaction fields in the diagrams show structure; they are not live transactions.

Questions

XRP Ledger tokenisation: the questions people ask next.

What is XRP Ledger tokenisation?

XRP Ledger tokenisation means representing something about a real-world asset on the XRPL using its native primitives rather than a smart contract: a hash anchored in a transaction memo, a pointer token (XLS-20/46) that references a record, an account-to-account credential (XLS-70), or a Multi-Purpose Token (XLS-33) issued by a regulated issuer for a fractional interest, with RLUSD as the settlement asset. Each is a different thing, and none is legal title. Property Vault's order is hash, pointer, credential, then - through regulated partners - fraction and settlement.

What is an XRPL Multi-Purpose Token?

A Multi-Purpose Token (MPT, XLS-33, live on mainnet since 1 Oct 2025) is a fungible token with its controls in the protocol itself: RequireAuth so only approved accounts can hold it, lock and clawback so an issuer can halt transfers or recover units, and up to 1,024 bytes of metadata. In this design a regulated issuer, not Property Vault, would issue MPTs for an SPV's or trust's interest in an asset, with holders gated by a Permissioned Domain (XLS-80).

Is my house on the blockchain?

No. Your documents, your address, your title number and your name never go on-ledger. Once anchoring reaches mainnet, the only thing written, at most once a day, is a single hash - a Merkle root of that day's integrity receipts - which identifies no property and no person. Later, a pointer token may reference your Vault's manifest behind a scope you control. Legal title stays where it is: with HM Land Registry for a registered home in England and Wales, and wherever the law places it for anything else.

Can I buy a fraction of an asset on this site?

No. Property Vault never hosts an offer, gates holders, runs a venue, holds keys or moves money. Fractional tokenisation, where the law allows it, is offered only by an FCA-authorised issuer or a Digital Securities Sandbox participant, on that issuer's own platform and under its own permissions. Property Vault supplies the Vault ID, Verified History, Vault Score and eligibility data. This page describes a product in development; it is not an offer or a financial promotion. Register interest and we will tell you when a regulated partner launches.

What is the difference between XRPL, XRP and RLUSD?

The XRP Ledger (XRPL) is the ledger itself - the public record and the settlement and tokenisation infrastructure. XRP is the ledger's native asset: it pays transaction fees, funds account reserves and provides liquidity. RLUSD is a US-dollar stablecoin issued on the ledger, used as the settlement asset so that a deposit or a completion payment does not move with a volatile price. Property Vault uses the XRP Ledger as the ledger, RLUSD as the settlement asset and XRP as liquidity. It never issues a token or stablecoin of its own.

Does a pointer token change who owns the asset?

No. The pointer token is a pointer or attestation, never title. The Property (Digital Assets etc) Act 2025 confirms a digital token can be property in its own right, but it does not link that token to a home, car or watch - that link is contractual. If a pointer and the statutory register ever disagree, the register wins.

What happens if a token has to be recovered?

The XRP Ledger gives a regulated issuer native tools for this without a smart contract: Clawback (live since 8 Feb 2024) lets the issuer recover a token after a court order, fraud or lost keys, provided it was enabled before first issuance; lock and freeze flags halt transfers while a dispute is resolved. The issuer operates those controls, not Property Vault.

Verify first. Tokenise through regulated partners.

Property Vault Markets launches through regulated partners, subject to regulatory approvals. Register interest and we will tell you when a partner goes live. Not an offer or a financial promotion.