Digital asset service provider authorisation in El Salvador
El Salvador authorises digital asset service providers through the National Commission of Digital Assets (CNAD) under the Digital Assets Issuance Law. Bitcoin-only service providers sit with the Central Reserve Bank (BCR) instead, so the right regulator depends on what you offer. Authorised firms appear on a public CNAD register. The authorisation gives no access to EU or UK clients.
Facts under review · last checked 2026-10-08 · confirm figures with the regulator before relying on them
Regulator · Comisión Nacional de Activos Digitales (CNAD) ↗
Key facts
- Legal basis
- Digital Assets Issuance Law; operating a digital asset business without CNAD approval is prohibitedas of 2026-10-08Source ↗
- Bitcoin service providers
- Fall under the Central Reserve Bank (BCR), not the CNADas of 2026-10-08Source ↗
- Public register
- CNAD publishes a register of authorised service providers, certifiers and issuancesas of 2026-10-08Source ↗
Realistic timeline
Who does what, and how long each phase usually takes once work starts. The regulator’s share is outside anyone’s control.
- HartsizScoping and regulator mapping (CNAD or BCR)1–3 weeks
- YouCompany set-up, policies and application pack4–10 weeksHartsiz drafts the pack; the client supplies people, documents and decisions
- RegulatorCNAD review8–24 weeksOutside our control; depends on CNAD workload and the quality of answers
Estimated end to end: 3–9 months. Not a guarantee.
What the regulator expects to see
- Business plan covering the services in scope
- AML/CFT programme and compliance officer
- Fit and proper owners and managers
Questions we get
Do we apply to the CNAD or the Central Reserve Bank?
It depends on the service. The CNAD authorises digital asset service providers; bitcoin service providers fall under the Central Reserve Bank. We map your services before choosing the route.
Can we use a Salvadoran authorisation to serve European clients?
No. Serving EU clients requires MiCA authorisation in an EU member state, and UK clients require FCA registration or authorisation.