Education resource, explains how the 4orm platform integrates with an institution's existing systems. Illustrative; simulated data; not financial advice.
For institutions, how it works

How 4orm integrates, and where your bank sits.

No prior crypto knowledge required. This walks a Canadian bank or credit union through what tokenization actually is, how the platform plugs into your existing core banking systems, the tokenized deposit, and what your team needs to know. The marketplace and order book are covered on the Marketplace page.

Grounded in primary regulatory & market sources
This is mainstream, not fringe

The world's biggest banks already do this. 4orm makes it shared infrastructure for Canada.

JPMorgan's Onyx / Kinexys runs tokenized deposits and atomic settlement for Tier-1 institutions today, but it's proprietary, single-bank infrastructure. 4orm is designed as the neutral, shared version: one compliance-first rail many Canadian banks and credit unions can plug into, instead of each building their own.

$1T+
settled on JPMorgan Onyx / Kinexys tokenized rails2
$300B+
intraday repo & tokenized collateral processed2
~$16T
assets tokenized globally by 2030 (BCG / Bank of Canada)8
BMO · RBC · TD
major Canadian banks already piloting tokenized cash, deposits & bonds9
The system

The whole picture, three flows.

An internal transfer that never leaves your bank, an interbank settlement through the 4orm rail, and the legacy correspondent route that 4orm replaces. Each gets its own diagram, so the architecture isn't abstract.

Legacy correspondent banking flow with full nostro and vostro account detail, per-hop SWIFT fees, ACSS deferred-net batch tray, T-timeline, dual ledgers, dual FINTRAC reporting paths, and a settlement-risk window showing customer funds at risk between trade date and T+2 final settlement Top band · each bank keeps its own books and files its own reports Bank A ledger internal record of this trade tx 18420 debit Customer A C$ 5,000,000 tx 18420 credit Nostro@Corr1 pending tx 18420 confirmation: awaited from Corr1 Bank A's view of the trade. Bank A reconciles its own. manual recon 3-6% break Bank B ledger internal record of the same trade tx 92117 debit Vostro@Corr2 C$ 5,000,000 tx 92117 credit Customer B pending tx 92117 confirmation: awaited from Corr2 Bank B's view, different tx ref. Bank B reconciles its own. Independent FINTRAC reporting two parallel statutory filings, no shared view From Bank A LCTR / EFTR / STR as applicable Bank A's record only From Bank B LCTR / EFTR / STR as applicable Bank B's record only FINTRAC receives two reports about the same trade, each filed under each institution's view of the world. No single canonical record exists for the trade. Status band · settlement risk window · funds at risk until T+2 ~T+2 of exposure · trade can break, get re-keyed, or be reversed Customer A funds debit posts quickly → green Customer B funds waits until T+2 next-morning settle Cust A Bank A SWIFT 1 Corr 1 SWIFT 2 Corr 2 SWIFT 3 Bank B Cust B Middle band · the correspondent chain, every hop has a cost Customer A sender Bank A sender bank core banking fee C$0.15-0.25 SWIFT MT103 message hop 1 Correspondent bank 1 routes Bank A traffic NOSTRO account for Bank A balance: C$ prefunded internal AML + sanctions re-screen on every hop fee C$0.15-0.25 SWIFT MT103 message hop 2 Correspondent bank 2 routes Bank B traffic VOSTRO account for Bank B balance: C$ prefunded internal AML + sanctions re-screen on every hop fee C$0.15-0.25 SWIFT MT103 message hop 3 Bank B receiver bank core banking Customer B receiver Bottom band · ACSS deferred-net batch settlement + the T-timeline ACSS deferred-net batch batches finalize next morning at the Bank of Canada tx 18420 Bank A -> Corr 1 -> Corr 2 -> Bank B pending C$ 5,000,000 tx 18419 Bank A -> Corr 1 -> Corr 2 -> Bank C pending C$ 1,250,000 tx 18418 Bank D -> Corr 1 -> Corr 2 -> Bank B pending C$ 750,000 tx 18417 Bank A -> Corr 1 -> Corr 2 -> Bank E pending C$ 98,000 All in transit, all trapped until the next-morning settlement window. Settlement window timeline Trade date T+1 T+2 recon final money leaves Bank A overnight trapped overnight trapped manual break work money arrives $ 01A $ 02A REJECTED · TX 02A +1 day · -C$45 recon cost re-keyed manually, customer notified Cycle tally · what the breaks cost 1 of 9 hops rejected · -C$45 recon

What you are seeing. Top band: each bank keeps its own books and files its own FINTRAC reports, two parallel filings about the same trade. Status band: yellow lights show Customer A and Customer B funds at risk during the T+2 settlement window. Customer A's light turns green quickly when their debit posts, but Customer B's stays yellow until next-morning settlement clears, exposing both parties to break/repair risk in the meantime. The amber coin bouncing back and the red BREAK! badge illustrate the 3 to 6% recon-break rate on capital-markets cross-bank trades, each costing additional time and money. Middle band: the correspondent chain with each intermediary's actual nostro/vostro account visible inside, plus the AML re-screening that happens on every hop. Each SWIFT message above the chain has a red fee pill. Bottom band: the ACSS deferred-net batch tray with the T-timeline alongside, showing where the money actually is at each stage. 4orm replaces this whole picture with the single rail shown in the What can 4orm do? tab.

What this costs in dollars, illustrative for a mid-size regional bank
~$520K / yr
Trapped liquidity. ~$40M average daily cross-bank flow stuck 1.5-2 days at 3.5% cost-of-funds.
~$340K / yr
Correspondent fees. ~1.8M annual cross-bank payments at $0.15-0.25 SWIFT cost per hop.
~$230K / yr
Compliance labour tail. Manual disposition of false-positive sanctions/AML alerts at $60/hr loaded.
~$180K / yr
The 3-6% break rate. Manual reconciliation work on cross-bank cap-markets trades at ~$120 per break.
~$150K / yr
KYC duplication. Re-onboarding the same client at each institution across the network.
Total: ~$1.42M / year for a Canadian mid-size regional bank profile, CAD, illustrative. This is the gap 4orm is built to close. Full v2 methodology on the What It Saves page; flip to the What can 4orm do? tab above to see what the same flow looks like with the rail in place.
Settlement: T+0 atomic Compliance: shared KYC + canonical sanctions Custody: licensed Canadian trust co Oversight: aggregate read-only, never reads your core Cost: zero correspondent fees on-platform
Settlement: instant, same balance sheet 4orm involvement: none Visibility: your bank only Reconciliation: none required
Settlement: T+1 to T+2 net Trapped liquidity: prefunded nostro/vostro Fees: C$0.15-0.25 per SWIFT hop Reconciliation: manual, 3-6% break rate Reporting: each bank meets its own statutory obligations independently
The tokenization engine

Designed for many real-world assets.

4orm is being designed so one compliance-native tokenization engine can handle a broad range of Canadian real-world assets (RWAs), with new classes added as modular plugins over time. The list below is illustrative and forward-looking.

Government & corporate bonds GICs & tokenized deposits Real estate Private credit Trust & estate holdings Grain & agricultural commodities Gold & precious metals Energy & resource royalties Carbon credits Equipment & receivables

All asset types shown are illustrative and forward-looking, not an offer or a commitment to any specific asset program.

1

Where your bank sits

The first question every banker asks is "do we have to run a blockchain?" The answer is no. 4orm keeps the regulated control with the institution; the blockchain is only an execution surface underneath. You stay in the world you already operate in.

Your institution

Keeps the control

  • The client relationship & deposits
  • Your risk appetite & approvals
  • Your core banking & treasury systems
4orm control plane

Governs the lifecycle

  • Onboarding, issuance, settlement
  • Compliance, registry, audit record
  • Custody & treasury orchestration
Blockchain

Executes only

  • Records token state & transfers
  • Runs the programmable logic
  • Never holds the regulated control

All the regulated functions stay inside the institutional control plane. The chain is swappable plumbing, which is exactly how Citi and JPMorgan deliver this: through familiar channels, with the blockchain complexity hidden.2

2

The platform at a glance

Six capabilities, each framed by the problem it removes. A bank can start with one and grow into the rest on a single compliance-first rail.

Atomic settlement
Settlement takes 2 days and traps liquidity overnight.

We settle atomically, T+0 not T+2. Liquidity is freed, not held. Both asset and cash move together or neither moves: DvP (delivery-versus-payment) on a single rail.1

Tokenized CAD deposit
Using stablecoins in institutional workflows carries regulatory and counterparty risk.

The settlement asset is a regulated on-ledger claim issued by the bank itself, not a stablecoin. It stays inside the regulated perimeter, can pay interest, and a risk officer can say yes to it.

Native RWA (real-world asset) tokenization + registry
Tokenizing a bond or property today requires building bespoke infrastructure and keeping a separate authoritative ownership record.

4orm is native issuance infrastructure: mint the token and the authoritative registry record together, with compliance rules built in at issuance.

Real-time collateralization
Collateral posted against a facility is locked and earns nothing until the exposure unwinds, sometimes for days.

Tokenized collateral is programmable: it can be mobilized, substituted and released in real time rather than being frozen in a custodian's system until the next settlement cycle.

Regulated secondary marketplace
Minting a token doesn't solve liquidity; there's no shared venue to sell it in Canada.

The connected order book gives tokenized assets a real exit. Your institution can offload positions to other verified members across the Canadian network. Details on the Marketplace page.

Trust and estate digitization
Trust and estate holdings are paper-intensive, slow to transfer and difficult to audit across multiple institutions.

Digital representation of trust and estate holdings governed under Canadian frameworks, with a shared ledger record that survives institution boundaries and makes probate and transfer programmatic.

All six integrate with your existing core banking, treasury and custody systems via ISO 20022 (the global financial messaging standard) and REST APIs, keeping deployment risk low.

Strategic architecture position

What 4orm owns, what it integrates, what falls out of it.

The platform's job is to own the regulated operational core. Everything else, blockchains, interop providers, custodians, KYC vendors, banking rails, is a bounded integration domain under platform governance, not an authoritative control.

Bounded integration domains

Under platform governance, not authoritative

  • Blockchain networks (permissioned ledger + interop targets)
  • Interoperability providers (Chainlink CCIP under evaluation)
  • Custodians (qualified Canadian trust companies, swappable)
  • KYC vendors (credential issuers within the reuse hub)
  • Banking rails (ISO 20022 / REST, RTR when it launches)
  • Swappable interoperability-provider adapters
Resulting architecture supports

What this separation produces

  • Regulated issuance, on a permissioned Canadian ledger
  • Policy-controlled liquidity, eligibility enforced at the rail
  • Institutional settlement discipline, atomic DvP only
  • Bounded interoperability, never an open bridge ecosystem
  • Supervisory auditability, aggregate read-only

Without surrendering ownership of the regulated operational core of the platform. The integrations are swappable; the canonical ledger is not.

3

What tokenization actually is

Tokenization is just issuing a digital certificate of ownership for a real-world asset on a shared ledger, with the rules of who can hold or trade it written into the token itself. The asset doesn't change, a bond is still a bond, a parcel of farmland is still farmland. What changes is that ownership can now move, settle and be verified in seconds instead of days.

What we hear from Canadian regional banks: their clients are already asking them to support tokenizing commercial real estate and agricultural land, but most banks don't have the in-house infrastructure to do it. That capability is what a partner provides.

The lifecycle of one tokenized asset

1
OriginateA real asset exists: a GoC T-bill, a bond, a building, ag land.
2
Legal wrapperA legal structure binds the token to the asset and its rights.
3
CustodyThe underlying is held by a qualified Canadian custodian.
4
MintA compliant token is issued, transfer rules built in.
5
DistributeIssued to verified, whitelisted members only.
6
TradeBought and sold on the marketplace order book.
7
RedeemBurned back to C$ at maturity or exit.

Paper asset vs. tokenized asset

Today, paper / book-entry

Slow, siloed, illiquid

  • Ownership lives in one institution's ledger
  • Selling means finding a buyer manually
  • Settlement is T+2; reconciliation is manual
  • Compliance re-checked at every step
to
On 4orm, tokenized

Fast, connected, tradeable

  • One shared record across the network
  • A live marketplace of verified buyers
  • Atomic T+0 settlement, self-reconciling1
  • Compliance embedded in the token

Tokenized bonds have already been issued and settled instantly on a dual cash/bond ledger in Canada,1 so this is a proven mechanism, not a concept. Run it yourself in the sandbox tokenization step.

Why a tokenized deposit, when internal transfers are already fast?

Fair question. Moving C$5M from your trading desk to your treasury desk takes seconds today. So why tokenize? Because internal transfers aren't the case. The case is what happens when value crosses an institutional boundary, pairs with a tokenized asset, or carries programmable rules.

Cross-bank settlement

ATB → RBC, today

Rides ACSS retail batch or Lynx RTGS. Lynx is same-day central-bank money but not atomic for asset trades, so cash and asset legs sit on separate rails with an exposure window. Prefunding stays trapped in correspondent accounts. Tokenized deposit: both legs settle atomically, no prefunding.

Cross-border

ATB → JPMorgan NY

Correspondent banking through SWIFT, intermediary banks, FX, compliance checks at every leg. 2 to 5 business days. Each intermediary takes a spread. Tokenized deposit on an interoperable rail: peer-to-peer settlement.

Capital markets

Bond trade, two institutions

T+1 or T+2 today. Both sides hold capital against counterparty exposure during the window. Bank of Canada research puts Canadian bank trapped liquidity at tens of billions at any moment. Tokenized deposit + tokenized bond: T+0 atomic, both legs together or neither.

Collateral mobility

T-bills against a derivatives position

Substituting, recalling, or redeploying collateral takes phone calls, faxes, reconciliation between custodians today. Tokenized collateral on a shared registry: mobilizable in seconds.

Why a tokenized deposit and not just Real-Time Rail (RTR)? RTR is a payments rail (money only, not assets), it doesn't programmatically enforce compliance, and it's domestic-only. RTR is faster manual. Tokenized deposits are programmable money. Different problem, different tool.

Internal use is the icebreaker. The real story is the external, cross-asset, and cross-border cases, that's where the savings on the What It Saves page come from.

The headline use case: the tokenized bank deposit

The version Canadian banks ask about most is the tokenized deposit, a digital, on-ledger representation of money a client already holds at the bank. It's the simplest place to start, and it is not a stablecoin or a "crypto" asset. The difference is what lets a risk officer say yes.

Tokenized bank depositStablecoin
Who issues itA regulated bankA non-bank company
What it isA direct claim on your deposit at the bankA token backed by a reserve of other assets
Who can hold itVerified, permissioned counterpartiesOften open / bearer
ComplianceInside the bank's regulated perimeter; can pay interestSeparate regime; typically no interest

A tokenized deposit keeps everything a banker trusts about a deposit: it's just faster and programmable. It settles in seconds, stays within the regulated perimeter, and never leaves the institution's control.10

"What we hear from Canadian credit-union innovation leads: "We have the relationships. We don't have the infrastructure to compete." The shared rail is how the second problem gets solved without losing the first.
The question every exec asks

Why not just build this internally?

Every Canadian bank's innovation team has asked this. The honest answer has three parts.

Network effects

A single bank's tokenization platform is, by definition, a network of one. JPMorgan's Kinexys serves JPMorgan's counterparties; it doesn't let other banks plug in. The rail's value scales with how many institutions are on it.

Regulatory

OSFI, FINTRAC, and the CSA prefer a neutral utility rail with read-only supervisory feeds over each bank negotiating its own proprietary infrastructure.

Cost

Building institutional tokenization in-house: ~C$20-50M and 2-3 years of engineering, custody, compliance, and regulatory work. Plugging into a shared rail is a fraction of that.

Same logic that put Visa and Mastercard on top of payments. Shared rails win on network effects, regulatory acceptance, and cost discipline.

4

For your team

The single biggest blocker to adoption isn't technology, it's getting a traditional banking workforce comfortable with it. Here's the version to share with a colleague who has never touched crypto.

What stays exactly the same

  • Your client is still your client.
  • It's still Canadian dollars, in your bank.
  • Compliance, KYC (know your customer) and AML still apply, fully.7
  • You still decide who you do business with.

What changes for the better

  • Money and assets move in seconds, not days.
  • Liquidity stops being trapped overnight.
  • Compliance runs inside the transaction.
  • Records reconcile themselves, one ledger.

What 4orm does, and deliberately doesn't

4orm does

  • Run the tokenization & settlement layer
  • Connect verified institutions & projects
  • Embed compliance & an auditable record
  • Settle in regulated CAD, atomically

4orm doesn't

  • Bank retail crypto traders or speculators
  • Take your client relationship from you
  • Ask you to hold volatile assets
  • Require a big-bang systems migration
A-Z

Glossary of key terms

The terms that come up across this site, defined in one plain sentence each.

Token

A digital certificate of ownership recorded on a shared ledger.

Tokenization

Issuing that certificate for a real asset, with the rules of ownership built in.

Tokenized deposit

A digital, on-ledger version of money a client already holds at the bank, a direct claim on the bank.

Stablecoin

A token issued by a non-bank, backed by a reserve of other assets. Not the same as a tokenized deposit.

RWA (real-world asset)

A tangible or financial asset: a bond, building, loan, commodity, represented as a token.

Atomic settlement (T+0)

Both sides of a trade settle together, instantly, or not at all. No multi-day wait.

DvP (delivery-versus-payment)

The asset and the cash change hands at the same instant, removing counterparty risk.

ISO 20022

The global financial messaging standard used by SWIFT, Payments Canada and central banks for structured payment messages.

Control plane

The regulated governance layer (compliance, registry, settlement), it stays with the institution.

Custody

Safekeeping of the underlying asset by a qualified custodian.

Order book

The live list of buy and sell orders that discovers a price and matches trades.

Trapped liquidity

Money stuck in transit or held as buffers/collateral while a transaction settles.

Permissioned ledger

A shared ledger only verified, approved participants can use, not an open public chain.

KYC (know your customer)

The identity verification process required before onboarding a counterparty, embedded in the token's transfer rules.

CSA (Canadian Securities Administrators)

The umbrella body of Canadian provincial and territorial securities regulators.

Need something to send a colleague?
A one-page field guide in plain English, print it or forward it to your team.
Open the one-page field guide
Verified sources

Sources & methodology

Full methodology & all sources

This page is an educational explainer. Mechanics are illustrated with simulated data, but the precedents and Canadian building blocks it describes are real and cited below. Field observations are drawn from 4orm's own conversations with Canadian regional banks and credit unions and are presented in anonymized, paraphrased form.

Educational resource · figures illustrative · not financial advice.

Questions, or want to walk through this with us? compliance@kcs-capital.com · 4orm Finance is built and operated by KCS Capital.