HSBC Bank plc has passed Gate 2 of the UK Digital Securities Sandbox. Under a regulatory notice dated 13 July 2026, its Orion platform may record, maintain and settle live digital securities in an environment overseen by the Bank of England and the Financial Conduct Authority.

For real-world assets, this is a meaningful move beyond a technical demonstration. It is not a blanket authorisation, however, and it does not show that a digital sovereign bond has already been issued successfully. Activity remains conditional, capped and confined to the sandbox.

What happened

The Bank of England’s Sandbox Approval Notice, issued on 13 July, approves HSBC Bank plc as a Digital Securities Depository, or DSD. The regulator’s public dashboard lists HSBC at Gate 2 and makes clear that a Gate 1 entrant cannot conduct live activity.

The notice covers three core functions for UK government debt, corporate bonds and notes:

  • making the initial book-entry record of securities, also known as a notary service;
  • maintaining top-tier securities accounts;
  • operating a securities settlement system.

Orion can therefore form part of the legal and operational infrastructure through which these instruments exist and move. The token is not merely a parallel receipt in this setup: the sandbox is testing functions normally performed by regulated market infrastructure.

On 15 July, HSBC described the decision as a first and linked Orion to the planned Digital Gilt Instrument, or DIGIT. That release is the beneficiary’s account. The regulatory fact does not depend on it; it is established directly by the Bank’s notice.

Live, but deliberately constrained

The word sandbox can sound like a consequence-free test. That is no longer accurate after Gate 2. The FCA says activity at this stage involves real digital securities being issued, traded and settled. Gate 3 is intended to support scaling and, for DSDs, a path towards full authorisation.

The current limits reflect that progression. HSBC’s notice sets an initial cap of £900 million for corporate bonds. The UK government debt limit is still marked “to be confirmed”. It would therefore be wrong to say that HSBC has unrestricted approval to process all UK digital bonds.

The approval also depends on several conditions:

  • the Bank must receive a satisfactory self-attestation covering settlement-finality rules;
  • the government-debt limit must be confirmed;
  • cash payments must use HSBC accounts, including where they are evidenced by HSBC settlement tokens or take the form of tokenised deposits;
  • HSBC must remain a credit institution and hold the permissions required for banking-type ancillary services.

The notice permits supporting tasks such as instruction matching, corporate-action processing and management of instrument identifiers. It does not displace any other permission that UK financial law requires.

DIGIT raises the stakes

The next milestone now has a public timetable. On 16 July, HM Treasury said the first DIGIT transaction should take place by the first quarter of 2027 on HSBC Orion. Any further issuance is subject to the first transaction succeeding.

Under the design decisions published by HM Treasury in July 2025, DIGIT is a pilot for a short-dated, digitally native UK government bond, separate from the government’s debt issuance programme. Its purpose is to test issuance and settlement on DLT-based infrastructure without immediately migrating the wider gilt market.

HSBC and London Stock Exchange Group have also signed a memorandum of understanding to develop a bilateral link between digital securities depositories and broaden investor access to the pilot. An MoU records an intention to cooperate; it is not evidence that the connection is already operational.

This sequence captures why RWA tokenisation is primarily a market-infrastructure question. The ledger matters, but so do the authority maintaining the central record, the point at which a transfer becomes final, the asset used for the cash leg and the procedures that apply when a system fails.

Why it matters now

Gate 2 changes the question. Earlier tokenised-security projects could show that a distributed ledger recorded units. HSBC can now test, with live instruments, the functions connecting that ledger to securities law and settlement.

For issuers, the potential prize is fewer reconciliations between separate databases and shorter post-trade processes. For banks, institutional investors and market infrastructures, interoperability is the more immediate issue. A digital security has limited value if it remains cut off from custody, liquidity and the settlement assets used by market participants.

Regulatory permission must still be separated from proven efficiency. Neither the Gate 2 notice nor the DIGIT timetable publishes observed settlement times, failure rates, comparative costs or market volumes. GatherHub’s inference is narrower: the UK has opened a controlled operational route. It has not yet demonstrated that DLT makes the bond market cheaper or more liquid.

Risks and caveats

A DSD is not yet a fully authorised central securities depository. The Bank and FCA’s joint policy statement warns that a sandbox DSD does not immediately meet the same standards as a CSD. Users should expect a higher risk of failure or operational disruption.

The caps are part of the protection. They are not merely commercial constraints. The technology remains untested at significant scale in important markets; limiting the value of securities is intended to contain the impact of an incident while controls are being evaluated.

The cash leg is concentrated. The notice requires HSBC accounts for payments within the approved scope. That makes the pilot easier to control, but it also creates operational dependence on the bank and its settlement arrangements.

Outsourcing does not outsource accountability. HSBC may outsource the notary, central-maintenance and settlement services, provided it informs the Bank before changing those arrangements. The notice explicitly says the entrant remains responsible.

The sovereign pilot is still ahead. As of 9 August 2026, the evidence supports the infrastructure approval and the government timetable. It does not yet support claims about a completed DIGIT issue, investor demand, secondary liquidity or performance under stress.

What to watch

Four observable events will show whether the approval becomes more than a regulatory milestone:

  1. confirmation by the Bank of England of the UK government-debt limit;
  2. publication of DIGIT’s final terms and its first issue by Q1 2027;
  3. actual deployment of the HSBC–LSEG depository link;
  4. any move by HSBC to Gate 3, bringing higher limits and tighter requirements.

The 13 July signal is precise: the UK has allowed one digital-securities infrastructure to leave the laboratory. The next proof must come from live operations.

Sources consulted

Original editorial illustration generated for GatherHub. This article is not financial advice.