A regulatory sandbox allows a firm to test a product or service under regulatory supervision with time limited or scoped permissions while FCA authorisation is the ongoing comprehensive permission to operate in regulated markets with full regulatory responsibilities and consumer protections. A sandbox shows oversight and engagement but it is not the same as full authorisation.
What a regulatory sandbox is and how it works
A regulatory sandbox is a supervised testing environment that allows firms to trial innovative financial services with real customers while the regulator observes outcomes. The framework exists to balance consumer protection with the need for innovation. Participation can come with conditions such as limits on numbers of customers or caps on exposure and the regulator can require reporting and risk controls during the test period.
In the UK the Digital Securities Sandbox provides a specific space for trials involving digital shares and related infrastructure. Firms accepted into the framework are supported to test with regulatory oversight and to learn lessons in a controlled setting. For example one platform may be approved for Gate 1 of the Bank of England and FCA Digital Securities Sandbox while it develops compliance and technical capabilities.
A sandbox is a time limited and supervised test space that aims to reveal risks and refine controls before wider market roll out.
What FCA authorisation means for a firm and for investors
FCA authorisation is the formal permission to carry out regulated activities in the UK on a continuing basis. Authorisation requires firms to meet and maintain standards for governance risk management capital rules where relevant and customer safeguards such as fair treatment and clear disclosure. An authorised firm is subject to ongoing supervision and periodic review by the regulator rather than the finite test conditions of a sandbox.
Authorisation implies that the firm has demonstrated the capability to comply with regulatory obligations across operations technology conduct and reporting and is judged by the regulator to be fit and proper for its proposed regulated activities.
Authorisation is the enduring regulatory permission that brings comprehensive obligations and ongoing supervision.
Key differences investors should understand
There are some clear practical differences that matter to anyone considering an investment in a firm or fund that is operating under sandbox approval rather than being fully authorised.
- Scope of permission. A sandbox approval is normally scoped to specific activities or to a trial cohort while authorisation covers the full set of regulated services the firm seeks to provide.
- Duration and certainty. Sandbox status is by design temporary or conditional while authorisation is ongoing unless it is withdrawn.
- Supervision type. Sandbox supervision is active and focused on learning and iteration while authorisation brings routine supervision aimed at ensuring sustained compliance.
- Consumer protections. Some protections may be calibrated during a sandbox test for the purpose of the trial but authorisation typically requires firms to meet the full suite of protections set out by the regulator.
- Risk exposure. Tests are intended to limit exposure while authorised services can scale and so may expose investors to different operational or market risks over time.
Investors should treat sandbox participation as a positive sign of regulatory engagement but not as a substitute for full authorisation.
Practical implications for UK investors considering digital shares
For an investor the distinction between sandbox approval and authorisation affects what to ask and how to assess risk. Start by clarifying the scope of the trial and any limits that apply to participation. Ask whether consumer money protections are in place and how complaints and disputes will be handled while the test is running.
Operational questions matter too. How are ownership records held and audited Who is custodian of capital if that applies and what continuity plans exist for the service if the trial ends or changes. Firms that are developing ledger based share registers will often provide audit logs and reconciliation reports.
Look for public statements and independent evidence of controls such as audited share registers and robust governance. For more on how ledger records can improve investor trust see Auditable share registers what ledger records change for investor trust. If you are weighing the structural features of an investment vehicle such as share terms and liquidity ask whether shares are non expiring and how that contrasts with fixed term structures. For further reading on share term differences see Non expiring digital shares versus fixed term property investments.
Due diligence while a firm is in a sandbox should focus on the scope of the trial the controls in place and how investor rights are impacted by any limits.
How to check status and what questions to ask a firm
Begin with the firm website and any regulatory communications. Firms in a UK sandbox will usually explain the scope of their approval and the conditions imposed by the regulator. Ask for written descriptions of any caps on participation guarantee limits or reporting schedules that apply during the trial.
Useful questions include What exactly does the sandbox approval cover Which regulatory conditions are in place How will investor funds or assets be protected during the trial and What is the pathway to full authorisation if the firm intends to scale. You can also check public registers and published guidance from the FCA and Bank of England for context on the sandbox framework.
Remember that being approved for a sandbox gate is not the same as being authorised. Sandbox approval is not full FCA authorisation and it does not by itself mean a firm has achieved the full set of permissions and obligations that come with ongoing regulated status.
Ask specific questions about limits protections and the firm pathway to broader authorisation before committing capital to a sandbox participant.
Frequently asked questions
What protections do investors lose if a firm is only in a sandbox?
Investors may face limits on compensation frameworks or on how complaints are handled during a test and the scope of statutory protections can differ depending on the design of the trial.
Can a sandbox participant offer services to all investors?
Many sandbox tests restrict the number and type of participants or require suitability checks so access may be limited compared with services offered by authorised firms.
Does sandbox approval mean rapid authorisation will follow?
Not necessarily. A sandbox can generate useful evidence but authorisation remains a separate assessment with its own timeframe and evidential requirements.
How can I verify a firm is truly in a regulator sandbox?
Check firm disclosures public announcements and regulator publications and ask the firm for the conditions of their approval including any reporting obligations.
Should I avoid all sandbox participants as an investor?
No. Sandbox participation shows active regulatory engagement but it is not a substitute for due diligence on the structure protections governance and exit options available to investors.
Clear answers from the firm and documented conditions from the regulator are the best way to judge a sandbox participant.
General information about the CurveBlock platform. Not financial, legal or tax advice. Capital is at risk. The value of digital shares can fall as well as rise. Past performance is not a guide to future returns.
CurveBlock