How to Obtain a Digital Asset Service Provider (DASP) Licence in El Salvador, CNAD Registration Guide

Becoming a licensed digital asset service provider El Salvador requires a clear understanding of the country’s rapidly maturing regulatory architecture, anchored by the 2026 Digital Assets Issuance Law and the National Digital Assets Commission (CNAD). For exchanges, custodians, stablecoin issuers and token projects evaluating market entry, El Salvador offers a purpose-built, crypto-forward framework unlike almost any other jurisdiction. This practical guide walks you through eligibility, the step-by-step CNAD registration process, AML obligations, timelines, indicative costs and the corporate structuring choices that determine how quickly you can launch. It is designed to complement, not replace, the official CNAD guidance, and to give regulated-entity applicants an actionable roadmap.

Introduction, why El Salvador now

El Salvador has moved from crypto novelty to structured regulation in the space of a few years, and the current window represents a meaningful opportunity for firms seeking a compliant base of operations. The jurisdiction pairs a favourable political posture toward digital assets with an increasingly formalised licensing regime overseen by the CNAD. For any prospective digital asset service provider El Salvador remains one of the few countries where legislators have deliberately built a dedicated framework for token issuance, custody and exchange activity rather than retrofitting old securities rules.

Snapshot, 2026 Digital Assets Issuance Law and Bitcoin legal-tender context

The Ley de Emisión de Activos Digitales (Digital Assets Issuance Law) established a comprehensive regime for issuing and servicing digital assets, mandating registration of service providers with the CNAD. This built on the earlier Ley Bitcoin (Bitcoin Law, 2021), which recognised Bitcoin’s role within the national payment system. Together, these instruments create a legal foundation that treats crypto activity as a supervised financial function, with defined eligibility, AML duties and reporting obligations, while positioning the country as a competitive hub for regulated market entrants.

Quick summary, who needs a DASP licence and what it covers

Any business offering digital asset services to the public in or from El Salvador generally falls within the scope of CNAD registration. Below is an at-a-glance view of common licence categories and the activities they typically cover. Verify your specific classification with the CNAD, as activity definitions determine your obligations, capital and testing requirements.

Process, How to register as a DASP with the CNAD

Successful dasp registration el salvador depends heavily on preparation before you formally engage the regulator. Applicants should assemble corporate documentation, a clear activity classification, a funded local entity, a governance structure with fit-and-proper individuals, and a complete AML/KYC framework in advance. Rushing to file without these foundations is the single most common cause of delay. Treat the pre-application phase as the point at which most of the real work is done: the CNAD review is smoother where the applicant arrives with a coherent, evidence-backed submission. The nine steps below map the end-to-end journey from classification to licence grant and ongoing supervision.

Step 1: Confirm licence category and activities

Your first task is to define precisely what your business does, because the CNAD classifies applicants by activity. An exchange offering fiat on-ramps is treated differently from a pure custody provider or a stablecoin issuer maintaining reserves. Map every proposed service, spot trading, custody, brokerage, staking-as-a-service, stablecoin issuance, token distribution, against the categories recognised under the Digital Assets Issuance Law. Where you offer multiple functions, you may need registration covering several categories, each with its own capital, testing and reporting profile. Getting classification right at the outset determines the scope of documentation, the applicable capital floors and the depth of technical evidence the regulator expects, so invest time here before drafting anything else.

Step 2: Corporate and local presence requirements

The CNAD generally expects applicants to operate through a locally recognised legal entity. Foreign applicants have several routes: incorporating a Salvadoran subsidiary, registering a branch of an existing overseas company, or establishing a representative presence for limited activities. A local subsidiary is often the cleanest option because it provides a clear governance perimeter, local tax residency and a straightforward interface with the Centro Nacional de Registros (CNR) for commercial registration. Branch structures can work for groups seeking to keep balance-sheet consolidation offshore, but they raise questions about liability and local capital allocation. Nominee arrangements should be approached cautiously, the regulator’s beneficial ownership disclosure requirements mean opaque structures are unlikely to survive scrutiny.

Choose the entity form that supports transparent ownership, local accountability and long-term operational substance.

Step 3: Governance and fit-and-proper checks

The CNAD assesses the individuals who control and run the business. Directors, senior managers and ultimate beneficial owners are subject to fit-and-proper evaluation covering integrity, competence and financial soundness. Expect to submit CVs, professional references, criminal-record certificates, sworn declarations and evidence of relevant experience in finance, technology or compliance. A credible governance framework demonstrates clear reporting lines, a functioning board or equivalent oversight body, and separation between operational and control functions. Applicants who present a thin management team, or key personnel with unresolved regulatory history, face a materially higher risk of refusal. Build a governance narrative that shows the regulator experienced, accountable people are at the helm of the proposed digital asset service provider El Salvador entity.

Step 4: AML/KYC framework and compliance officer appointment

Anti-money-laundering and counter-terrorist-financing controls sit at the heart of any credible application. You must appoint a qualified compliance officer, ideally locally accessible, with clear authority and a direct reporting line to senior management. Around this role you should build a documented AML programme aligned with FATF guidance on virtual assets and VASPs. Core elements include a written AML policy, risk-based customer due diligence (CDD), enhanced due diligence (EDD) for higher-risk clients, sanctions and PEP screening, transaction monitoring rules, record-keeping procedures and a suspicious-activity reporting workflow. The framework should reflect the specific risks of your activity, cross-border flows, privacy-enhancing assets, high-value custody.

The CNAD and the relevant financial supervisor expect to see not just policies on paper but evidence of implementation: screening tools, monitoring dashboards, training logs and escalation records. A robust, demonstrable AML programme is frequently the deciding factor between a smooth review and a protracted one. Treat it as the compliance spine of the entire application rather than a bolt-on.

Step 5: Technology, security and custody arrangements

The regulator wants assurance that client assets and data are secure. Prepare evidence of your technology stack, information-security controls and custody architecture. For custody providers this means documenting the split between cold storage (offline keys) and hot wallets (operationally connected), key-generation and signing procedures, multi-signature or MPC arrangements, disaster recovery and business continuity. Where you deploy smart contracts, for token issuance or stablecoin mechanics, independent smart-contract audits and penetration-test reports strengthen the file. Provide systems architecture diagrams, access-control matrices and incident-response plans. Demonstrating mature, auditable technical controls signals operational readiness and reduces regulator friction.

Step 6: Documentation checklist

Assemble a complete, well-ordered documentation pack before submission. A typical file for a digital asset service provider El Salvador application includes the following core items, each of which should be current, consistent and, where required, legalised or translated into Spanish:

• Incorporation documents: constitutive deed, bylaws, commercial registry extract and proof of local entity status.
• Ownership and governance records: shareholder register, organisational chart, beneficial ownership declarations and board resolutions authorising the application.
• Financial statements: audited accounts or opening balance sheet evidencing minimum capital and financial soundness.
• Business plan: activity description, market strategy, revenue model, risk assessment and three-year projections.
• AML manual: full AML/CTF policy, CDD/EDD procedures, screening and monitoring methodology and the compliance officer appointment.
• KYC procedures: onboarding flows, identity-verification standards and record-retention policy.
• Systems and security evidence: architecture diagrams, custody model, security certifications and audit reports.
• Legal opinion: confirmation of regulatory classification and compliance with applicable law.
• Fit-and-proper documentation: CVs, references, criminal-record certificates and sworn declarations for key persons.

Step 7: Application submission to CNAD and fee payment

Once your pack is complete, submit it to the CNAD in the required format together with the applicable registration fees. Documents originating abroad typically need apostille or legalisation and certified Spanish translation. Follow the CNAD’s prescribed submission structure precisely, mislabelled or missing annexes generate immediate queries. After filing, expect an initial completeness check and often a first round of clarification requests. Responding promptly and thoroughly at this stage sets a constructive tone for the substantive review that follows.

Step 8: CNAD review, requests for information and inspection visits

The CNAD conducts a substantive review, issuing requests for information (RFIs) to probe governance, AML controls and technical arrangements. The regulator may schedule on-site inspection or fit-out visits to verify that your offices, systems and controls exist as described. Prepare for audit sampling: be ready to demonstrate live screening, produce monitoring records and walk reviewers through custody procedures. Well-documented, honest responses shorten this phase considerably.

Step 9: Licence grant, post-licence obligations and periodic reporting

On approval, the CNAD issues your registration, and you may commence licensed activity within its scope. Registration is the beginning of an ongoing relationship, not the end. Post-licence obligations typically include periodic financial and AML reporting, notification of material changes (ownership, directors, services), maintenance of capital, and cooperation with supervisory inspections. Building internal calendars and compliance-monitoring routines from day one keeps your digital asset service provider El Salvador operation in good standing.

Comparison table, requirements, costs and typical timelines by licence type

The table below compares indicative requirements across the main DASP categories. Figures are illustrative ranges intended for planning only, precise minimum capital, testing standards and fees change over time and must be verified directly with the CNAD before you rely on them. Use this matrix to scope your budget and internal readiness, not as a definitive fee schedule.

Read the table as a relative guide. Exchanges and stablecoin issuers face the most demanding capital and technical burdens because they carry settlement and reserve risk; token issuers offering a single distribution may face a lighter path. In every case, timelines assume a complete, well-evidenced filing, incomplete applications extend the clock regardless of category.

Key Requirements / Eligibility

Eligibility for a crypto licence el salvador turns on who you are, how you are capitalised, and whether your controllers meet integrity standards. The subsections below break down the core gating requirements the CNAD assesses.

Who can apply, foreign entities, branches, representative offices

Foreign crypto businesses can and do apply. In practice, most establish a Salvadoran legal entity to hold the registration, giving the regulator a clear local perimeter for supervision. Branches of overseas companies are possible where the group prefers not to incorporate a fresh subsidiary, though they must still satisfy local registration, capital-allocation and beneficial-ownership requirements. Representative offices suit limited, non-transactional activity such as liaison or marketing but generally cannot conduct licensed services. Whichever route you choose, the CNAD looks for genuine local substance, real management, real controls and a real point of contact, rather than a shell arrangement designed solely to obtain a licence.

Minimum capital and financial soundness

Applicants must demonstrate adequate capital and overall financial soundness proportionate to their activity and risk. Custody and exchange operators carry higher floors because they hold or move client value; issuance-only businesses may face lighter requirements. Beyond the headline capital figure, the regulator assesses funding sources, liquidity, and the credibility of financial projections in the business plan. You should be prepared to evidence the origin of funds, show that capital is genuinely paid-in rather than nominal, and confirm that reserves are sufficient to absorb operational and market stress. Financial soundness is assessed on substance, not just a bank balance on filing day.

Fit-and-proper and beneficial ownership disclosure

The CNAD requires full disclosure of beneficial owners and applies fit-and-proper testing to controllers and key managers. Expect to trace ownership up to ultimate natural persons, disclose any regulatory or criminal history, and confirm the integrity and competence of decision-makers. Opaque or evasive ownership structures are a common ground for delay or refusal, so transparency here is non-negotiable.

Prohibited activities and grounds for refusal

Registration can be refused where the applicant fails fit-and-proper standards, cannot evidence adequate AML controls, lacks required capital, or proposes activities outside the permitted scope. Misrepresentation in the application, unresolved sanctions exposure, or an inability to demonstrate secure custody are all grounds for rejection. Applicants should treat candour and completeness as protective, attempting to gloss over weaknesses typically surfaces during the CNAD’s review and inspection process.

AML/KYC compliance for DASPs in El Salvador

Robust aml obligations digital assets el salvador compliance is central to holding a DASP registration. The regulator and the financial supervisor expect a living programme, evidenced by tooling, records and trained staff, not a static policy document.

Mandatory AML programme elements

Your AML programme must, at minimum, implement risk-based customer due diligence, enhanced due diligence for higher-risk relationships, and ongoing transaction monitoring. CDD covers identity verification, beneficial-ownership identification and purpose-of-relationship assessment at onboarding. EDD applies where risk indicators arise, politically exposed persons, high-value flows, high-risk jurisdictions or privacy-enhancing assets, and typically requires senior sign-off and enhanced source-of-funds checks. Transaction monitoring should apply calibrated rules and thresholds to detect structuring, rapid movement and other typologies, with alerts triaged by trained analysts. You should also maintain sanctions and PEP screening at onboarding and on an ongoing basis, retain records for the required period, and deliver regular staff training.

The Superintendencia del Sistema Financiero supervisory expectations reinforce that these controls must be demonstrable in practice, not merely documented. A programme that cannot show live screening, monitoring evidence and audit trails will struggle under inspection.

Reporting obligations, STR/CTR equivalents and supervisor cooperation

Registered providers must report suspicious activity and, where applicable, large or cash-equivalent transactions to the designated authorities through prescribed channels. This means maintaining an internal escalation route to your compliance officer, documented decision-making on whether to file, and secure records of reports made. You are also expected to cooperate promptly with supervisory requests, inspections and information demands, providing accurate data on customers and transactions when lawfully required.

FATF alignment and practical tooling

Aligning your programme with the FATF risk-based approach signals maturity to the regulator and supports cross-border credibility. In practice this means deploying reputable transaction-monitoring and blockchain-analytics tooling, screening solutions for sanctions and PEPs, and standardised suspicious-activity report templates. Document why you selected each tool and how its rules map to your risk assessment, so reviewers can trace the logic from risk to control.

Timelines, fees and typical application outcomes

Realistic planning matters. From a complete, well-prepared filing, the CNAD process typically unfolds across a pre-application preparation phase, a completeness check, a substantive review with one or more RFI rounds, possible on-site inspection, and finally the licence grant. Applicants should budget several months end-to-end for a straightforward category and longer where reserves, complex ownership or multiple activities are involved. The dominant causes of delay are avoidable: incomplete documentation, weak or undemonstrated AML controls, opaque beneficial ownership, insufficient evidence of capital, and slow responses to RFIs. Fees vary by category and should be confirmed directly with the CNAD, as published schedules are updated over time.

Front-loading preparation, a complete pack, a working AML programme and responsive local counsel, is the most reliable way to compress the overall timeline and improve the probability of a first-pass approval.

Local presence, corporate structure and tax considerations

Structuring decisions shape both your regulatory path and your operating economics. Most foreign entrants choose between a local subsidiary and a branch. A subsidiary offers a clean liability perimeter, local tax residency and simpler CNR registration, while a branch keeps consolidation offshore at the cost of greater structural complexity. Whichever you select, you must complete commercial registration with the CNR, obtain the necessary tax and operating registrations, and establish local governance. Banking and custody relationships deserve early attention: settlement, fiat rails and reserve accounts must be arranged with institutions comfortable serving crypto businesses, and the Banco Central de Reserva framework on legal tender is relevant to how you handle settlement and payments given Bitcoin’s recognised status.

Tax planning should consider corporate income tax, treatment of digital-asset gains and cross-border flows; specialist local advice is essential because the interaction of crypto activity, legal-tender rules and general tax law is nuanced.

Risks, enforcement and supervisory expectations

Registration brings ongoing supervision. Providers face inspection risk, and material breaches can trigger fines, remediation orders, licence suspension or withdrawal, alongside significant reputational harm. The supervisor expects continuous compliance, not point-in-time readiness, so weak AML monitoring, delayed reporting or governance failures carry real consequences. Treat your registration as a standing obligation to maintain controls, cooperate with inspections and self-report material issues promptly to preserve standing and trust.

How Global Law Experts supports applicants

Global Law Experts helps prospective and existing operators navigate the full lifecycle of a digital asset service provider El Salvador registration. Through vetted in-country counsel introductions and coordinated project management, support typically spans activity classification and eligibility assessment, entity establishment and CNR registration, and preparation of a complete, CNAD-ready application pack. That includes drafting and reviewing the business plan, assembling fit-and-proper documentation, and building an AML/KYC programme aligned with FATF standards and local supervisory expectations. Support also extends to technical due diligence, coordinating smart-contract audits, custody design review and security evidence, and to managing RFI responses and inspection readiness through to licence grant and post-licence reporting.

The scope is practical and outcome-focused: turning a complex, multi-workstream process into a structured path from concept to a licensed, compliant operation. You can also consult the CNAD DASP application guide (detailed checklist & templates) for operational templates.

Appendix, application checklist and downloadable summary

A practical application checklist should mirror the nine-step process above, converting each step into a set of concrete actions and required documents you can track to completion. Use it to confirm classification, entity establishment, governance, AML/KYC build, technical evidence, documentation completeness, submission and post-licence obligations before you engage the regulator. A downloadable PDF version, to be prepared as a separate asset, will consolidate the full checklist and template document list so applicants can manage readiness for a digital asset service provider El Salvador registration in a single, structured workflow. Always cross-check current requirements against official CNAD guidance before filing.

Sources

• Comisión Nacional de Activos Digitales (CNAD), official regulator website and registration guidance
• Ley de Emisión de Activos Digitales (Digital Assets Issuance Law), Diario Oficial
• Ley Bitcoin (Bitcoin Law, 2021), Asamblea Legislativa
• Banco Central de Reserva de El Salvador, legal tender and financial system guidance
• Centro Nacional de Registros (CNR), company and commercial registration
• Superintendencia del Sistema Financiero (SSF), AML/CTF supervisory rules
• FATF, Guidance on a Risk-Based Approach to Virtual Assets and VASPs