Codema Global Rating certification for tokenization platforms, digital asset custodians, and distributed ledger ecosystems — conducted by EONTA as Codema Accredited Partner (APFA, Codema Global Rating SAGL) with global authorization and no territorial limits. Assessments apply voluntary technical protocols RP2110/1 and RP2120/1, with normative references to MiCA, FATF, ISO 27001, and ISO 37301. Each evaluation is assigned a unique CRPA identifier by Codema — the sole valid reference for its existence, traceability and recognition under the Codema framework.
The challenge
Institutional investors, regulators, and counterparties require documented evidence of governance, security, and operational integrity — not cryptographic claims alone. EONTA conducts Codema Global Rating evaluations as an Accredited Partner under the APFA with Codema Global Rating SAGL — applying voluntary technical protocols RP2110/1 (node independence and IT compliance) and RP2120/1 (fifteen auditable RWA tokenization domains), drawing on normative references including MiCA, DORA, FATF, ISO 27001, ISO 37301, and ISO 22739. The Codema methodology has a 15-year institutional lineage — originating in regulated pharma supply chain evaluation since 2009, developed with SUPSI, and today applied by organisations including CertX (SGS Group). Each evaluation is registered in the Codema centralized database with a unique CRPA identifier: the sole valid reference for its existence, traceability, and recognition.
Institutional investors, fund administrators, and regulated banking counterparties operating in digital asset ecosystems require the same evidence-based due diligence they apply to traditional financial infrastructure. For Real-World Asset tokenization, RP2120/1 defines fifteen auditable domains — from ownership and custody to valuation, encumbrances, ESG claims, and governance independence — grounded in FATF Recommendations, MiCA disclosure requirements, ISO 55000 asset management principles, and ISO 31000 risk management. Cryptographic correctness alone does not satisfy compliance teams, legal counsel, or investment committees. A Codema Global Rating does.
Distributed ledger infrastructures rely on node operators whose independence, governance, and IT integrity directly determine network security and decentralisation. Without structured assessment against a voluntary certification scheme such as Codema RP2110/1 — which incorporates MiCA governance standards, FATF beneficial ownership requirements, ISO 37301 compliance management, and ISO/IEC 27001 IT controls — stakeholders cannot reliably determine whether independence is real or merely declared. Demonstrating verified node-level trust, through a Codema certificate issued by a Codema Accredited Partner, has become a commercial and governance prerequisite.
Engagement models
EONTA operates as Codema Accredited Partner — formally designated "Certification Body or Accredited Partner" under the APFA with Codema Global Rating SAGL — with global authorization and no territorial limits. The Codema framework is a voluntary technical scheme with over 15 years of institutional history, originating from regulated pharma supply chain evaluation and extended to blockchain, cloud, and digital asset infrastructure through protocols developed with SUPSI and applied by organisations including CertX (SGS Group). EONTA is authorized under RP2100 (Blockchain reference), RP2110/1 (Node Independence), RP2120/1 (RWA Tokenization), RP2150, and RP2200 (Cloud services). Each completed evaluation is registered in the Codema centralized database and assigned a unique CRPA identifier — the sole valid reference for its traceability and recognition.
Structured, evidence-based evaluation of your distributed system — governance, technical architecture, and operational integrity — producing a formal Codema Global Rating that institutional counterparties and regulators can reference and verify.
Codema Global Rating — standardised and comparable
Verifiable outputs for institutional counterparties
Independent — never an advisory or implementation role
Core capabilities
Each capability delivers structured, evidence-based evaluation — from governance to technical architecture — producing Codema Global Rating outputs — MiCA- and FATF-aligned — structured for institutional counterparty review, regulatory submission, and board reporting.
Evaluation of protocol governance, decision-making structures, key management, and administrative controls across your distributed system or digital asset platform.
Assessment under Codema RP2110/1, conducted by a Codema-qualified Lead Auditor — covering legal identity, UBO identification, ownership and control structures, financial independence, related-party conflicts, operational integrity, baseline IT compliance (ISO/IEC 27001), and sustainability. Normative references: MiCA governance requirements, FATF beneficial ownership standards, ISO 37301, and DORA operational resilience provisions.
Independent assessment of real-world asset tokenization structures — asset backing adequacy, custody arrangements, legal integrity, and disclosure documentation.
Rating evaluation and certification delivered by EONTA as Codema Accredited Partner (APFA — globally authorized, no territorial limits) — applying RP2110/1 for node providers and RP2120/1 for RWA tokenization platforms, under Continuous Control and Monitoring (CCM) by Codema. Each engagement is registered in the Codema centralized database and assigned a unique CRPA identifier — the sole valid reference for its existence, traceability and recognition. Independently verifiable in the Codema centralized registry via its CRPA reference.
Assessment of decision-making structures, independence of ownership and management, conflict-of-interest management, and ethical standards — evaluated under RP2120/1 Chapter 15 (Independence, Ethics & Governance) and RP2110/1 Chapter 2 (Compliance & Legal Soundness), drawing on ISO 37301 compliance management and MiCA governance body requirements. Conducted by a Codema-qualified Lead Auditor.
Service framework
The information procurement and risk management teams need before approving an external assurance engagement.
How it works
A structured engagement that translates technical complexity into documented, verifiable evidence — producing outputs that institutional counterparties, regulators, and investors can rely on.
Define entity type, platform architecture, regulatory jurisdiction, and applicable Codema evaluation scope — RP2110/1 (node layer), RP2120/1 (asset layer), or both — with relevant normative alignment confirmed (MiCA, FATF, DORA, ISO). Codema Protocols are a voluntary technical framework; application is freely elected by the client. All evaluations are led by a Codema-qualified Lead Auditor, registered in the Codema centralized database, and assigned a unique CRPA identifier upon completion.
Structured governance, technical, and operational evaluation — assessing controls, architecture, and compliance posture against applicable standards.
Documentation review and evidence package assembly — producing traceable, verifiable assurance outputs from governance through technical infrastructure.
Codema Global Rating evaluation registered in the Codema centralized database and assigned a unique CRPA identifier by Codema — the sole valid reference for the engagement's existence and recognition. Certificate issued under RP2110/1 and/or RP2120/1, with full normative alignment documentation (MiCA, DORA, FATF, ISO). Structured for institutional counterparty disclosure, regulatory submission, and board governance reporting.
Why EONTA
EONTA holds an Accredited Partner Framework Agreement (APFA) with Codema Global Rating SAGL — formally designated as "Certification Body or Accredited Partner" under the APFA — with global authorization and no territorial limits. The Codema evaluation methodology has over 15 years of track record: founded in 2009 as Codema Pharma (Brussels) as a preferred evaluation partner to European regulators in pharmaceutical supply chains, the same protocol-based framework was extended to blockchain, cloud, and digital asset infrastructure. Codema protocols were developed in collaboration with SUPSI (University of Applied Sciences and Arts of Southern Switzerland) and are applied by organizations including CertX — part of the SGS Group, the world's leading testing, inspection, and certification company. Both RP2110/1 and RP2120/1 draw on internationally recognised normative references — MiCA, DORA, FATF, ISO 27001, ISO 37301, and ISO 22739 — ensuring a Codema certificate carries a consistent, comparable meaning for counterparties reviewing it under the Codema framework.
A Codema Global Rating requires both technical rigour and regulatory substance. RP2110/1 addresses node-layer integrity: legal identity, UBO transparency, IT compliance, financial independence, and sustainability. RP2120/1 addresses asset-layer integrity across fifteen auditable domains — with additional asset-family annexes applied where Codema has published them. EONTA is also authorized under RP2100 (Blockchain reference protocol), RP2150, and RP2200 (Cloud services — IaaS, PaaS, SaaS). Codema protocols are living documents under monthly revision through open expert working groups open to sector associations, regulators, and academic institutions. EONTA delivers all applicable evaluations in a single coordinated engagement, led by a Codema-qualified Lead Auditor.
Who this is for
EONTA's digital trust assurance services are designed for the platforms, institutions, and governance functions accountable for digital asset integrity, regulatory standing, and institutional credibility.
Primary stakeholders
Common engagement triggers
Institutional investor or counterparty due diligence requirement
Platforms requiring a Codema Global Rating certificate — issued by a Codema Accredited Partner under the APFA — to satisfy institutional investor, fund administrator, or regulated counterparty due diligence requirements.
Tokenization programme or RWA product launch
Institutions launching real-world asset tokenization products requiring a Codema RP2120/1 rating certificate — conducted by a Codema-qualified Lead Auditor — before institutional distribution or regulatory filing.
Frequently asked
Take the next step
A Codema-rated EONTA assessment gives investors, regulators, and partners a standardised, verifiable answer. Define the scope in 30 minutes.
All scoping conversations are confidential. EONTA does not share engagement details with third parties.