Taurus: digital asset custody, tokenization and institutional trading

The version 3.58 product documentation describes PROTECT signing operations protected by hardware security modules, with optional MPC integration. Approval policies can reach individual smart-contract functions. Hot, warm and cold configurations are available; cold deployment can use a technical or physical air gap. The configuration and recovery procedure establish the actual separation of signing authority.[5]

Taurus-CAPITAL is relevant to issuance and post-issuance asset lifecycle operations. Token creation does not itself settle shareholder registers, cash distributions, securities regulation or corporate actions. Each issuer needs to determine its applicable register of title and how reversals, freezes and redemptions work if a chain or wallet fails.[3]

A trading or custody institution should separate blockchain settlement finality from confirmation of an off-chain legal claim. APIs, ledgers and blockchain data can reconcile numerically while referring to different ownership moments; a proper reconciliation design records both the asset quantity and the legal record or custodian that controls it.[3][2]

PROTECT and CAPITAL support SaaS, hybrid and fully on-premises deployment. NETWORK connects participating PROTECT users without requiring assets to be sent to Taurus or a common address. EXPLORER supplies node and indexing services through an API. The deployment agreement establishes hosting region, key custody, backups and recovery responsibilities.[5]

An enterprise total cost estimate should include the custody stack, chain-node connectivity, HSM provision, incident response, tokenisation lifecycle events, external registry dependencies and group services such as execution. The official pages do not establish a comparable single price per wallet, API call or tokenised security.[2][3]

Regulated execution and technology licensing have separate commercial schedules. Compare the complete deployment cost with the assets, service entity and support entitlement held constant.[6][7]

A phased evaluation should test a small set of approved assets and wallets with documented signer recovery, transaction reversal policy, onchain and offchain reconciliation and sanctions controls. Expand the asset list only after examining token standards, future forks, custody insurance where contracted and the ability to suspend compromised credentials.[2][5]

For tokenised securities, the issue should map asset-holder rights, who updates the authoritative register, cash entitlement dates and how operators perform freezes or corporate actions. It is a regulated business transformation, not only a smart-contract deployment.[3][7]

The corporate site offers an institutional contact route. Service-level commitments should be obtained for the precise infrastructure or regulated entity in use, with separate contacts for outages, security incidents and trade disputes. Public certification references are not substitutes for signed recovery objectives.[1][2]

Contracts should specify security vulnerability notices, key compromise procedures, supported chain versions, geographic support hours, incident escalation and data retrieval on termination. Institutions with direct control of hardware and keys require a different operating procedure from fully managed custody relationships.[2][5]

FINMA’s 29 October 2026 list identifies Taurus SA in Geneva as an authorised securities firm. CySEC’s register lists Taurus (Europe) Ltd under investment-firm licence 465/26, granted on 9 March 2026, with company registration number 460666. The European risk disclosure applies to that entity’s financial-instrument services. These permissions do not extend automatically to customers deploying Taurus software.[10][11][7]

Institutional customers remain responsible for deciding whether their asset or token falls under securities, AML, custody, market abuse and outsourcing rules. A compliant vendor cannot transfer its permissions to a bank by API connection, and regulated execution should not be assumed to be included with PROTECT or CAPITAL.[7][6]

Taurus is headquartered in Geneva and markets infrastructure for banks, issuers and institutional intermediaries. It combines enterprise software with certain regulated services, which gives it multiple types of customer agreement. Corporate and licence identity should be recorded at the level of each proposed service.[1][6]

Taurus-PRIME supports FIX, REST and WebSocket connectivity alongside voice and chat channels. Its advertised order workflows include requests for quotes, limit orders and time-weighted execution. Tokenised securities can trade through auctions, continuous trading or OTC arrangements according to liquidity. PRIME’s institutional service and the TDX organised trading facility sit alongside the software products; their execution and custody terms require the relevant service agreement.[9]

Operator

Taurus S.A. (Switzerland); Taurus (Europe) Ltd operates a separate regulated European business

Service scope

Bank-grade digital-asset custody technology, asset tokenisation, interoperability and distinct trading services. The technology platform and the regulated brokerage/trading activities of Taurus entities are different service relationships.

Customer types

Banks and regulated custodians; Broker-dealers; Asset managers; Tokenisation issuers; Institutional financial market infrastructures

Delivery

On premises; Hosted; Hybrid; API

Pricing publication

Quote only

Headquarters

Geneva, Switzerland

Platforms

Taurus-PROTECT; Taurus-CAPITAL; Taurus-NETWORK; Taurus-EXPLORER; Taurus-PRIME / TDX

Integrations

Bank ledgers; HSM and signing controls; Blockchains; Institutional counterparties

Pricing scope

Institutional enterprise quotation for custody software, tokenisation and managed services. Fee layers may include environment, HSM/key management, chains/assets, issuance, exchange or operator fees and professional services; the official public pages do not provide a universal tariff.

Implementation

Deployment combines signing policy, token lifecycle management, bank-ledger integration and node infrastructure. PROTECT and CAPITAL support SaaS, hybrid and on-premises configurations; NETWORK access requires PROTECT.

Support

Institutional enquiries and contracted support. The service agreement defines recovery objectives, incident response, chain-version support and the division of responsibility for customer-controlled hardware and keys.

Permissions and regulatory scope

FINMA lists Taurus SA in Geneva as an authorised securities firm. CySEC lists Taurus (Europe) Ltd under investment-firm licence 465/26, dated 9 March 2026. These are entity-specific permissions; licensing Taurus software does not authorise the buyer’s own custody or investment business.

Provider metadata checked 29 Oct 2026Source 1Source 2Source 3Source 4Source 5Source 6Source 7Source 8Source 9Source 10Source 11

A strong request for proposal asks who can initiate a signature, who can unfreeze an asset, which party maintains the legal register, how a lost key is recovered, which chains are supported and what happens if either the blockchain or the bank ledger is unavailable. The answers should be tested per deployment and group entity.[5][6]