Licence and Permit Review for Pre-IPO Companies: Regulatory Sandbox and Exemption Arrangements

The Hong Kong Monetary Authority’s (HKMA) launch of the second phase of its Fintech Supervisory Sandbox (FSS 2.0) in December 2024, combined with the Securities and Futures Commission’s (SFC) accelerated licensing regime for virtual asset trading platforms, has fundamentally altered the pre-IPO compliance landscape for companies operating in regulated or quasi-regulated sectors. For a company targeting a Main Board listing in 2026, the window to secure necessary licences and permits, or to negotiate binding exemption arrangements, is now measured in months, not years. The SFC’s 2024-25 annual report recorded a 12% year-on-year increase in licence applications from pre-revenue technology firms, a cohort that historically relied on exemption letters to satisfy sponsor due diligence. This shift is driven by HKEX Listing Rule 9.03(3), which requires a listing applicant to demonstrate that it has obtained all necessary regulatory approvals for its core business operations. Failure to secure these approvals before the A1 submission can trigger a formal comment letter from the Listing Division, delaying the timetable by at least three months. This article examines the specific licence and permit pathways, sandbox exemptions, and structuring mechanics that pre-IPO companies must address, with reference to the SFC’s Licensing Handbook (January 2025 edition) and the HKMA’s Supervisory Policy Manual module SA-1.

The Regulatory Threshold: When a Licence Becomes a Listing Precondition

The trigger for a mandatory licence review is not the company’s revenue size but the nature of its regulated activity under the Securities and Futures Ordinance (Cap. 571) or the Banking Ordinance (Cap. 155). For pre-IPO companies, the most common pitfalls arise from Type 1 (dealing in securities), Type 4 (advising on securities), and Type 9 (asset management) regulated activities under the SFO. A company that operates a digital asset custody service, for example, must determine whether its activities fall within the SFC’s expanded definition of “dealing in securities” following the 2023 amendments to the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (AMLO). The SFC’s Guidelines for Virtual Asset Trading Platform Operators (June 2023) explicitly state that any platform offering trading in “virtual assets that fall within the definition of ‘securities’ under the SFO” must hold a Type 1 licence. Failure to do so renders the platform operator ineligible for listing under HKEX Listing Rule 8.04, which requires the issuer and its business to be “suitable for listing.”

Type 1 Licence: The Digital Asset Edge Case

The most contentious area in 2025 is the treatment of non-fungible tokens (NFTs) and tokenised real-world assets (RWAs). The SFC’s Position Paper on Tokenised Securities (November 2024) clarified that tokenised securities—where the underlying asset is a debt or equity instrument—are “securities” for licensing purposes. A pre-IPO company that issues its own tokenised equity as part of a pre-IPO fundraising round must therefore assess whether it is “dealing in securities” under Section 113 of the SFO. If the tokenised equity is offered to the public in Hong Kong, the company must either hold a Type 1 licence or rely on a specific exemption under the SFO. The most common exemption is the “professional investor only” safe harbour under Section 103(3)(k) of the SFO, which permits offers to persons whose business involves dealing in securities. However, this exemption requires the company to maintain a register of offerees and to ensure that no general marketing occurs—a condition that pre-IPO roadshows frequently violate. The SFC’s Enforcement Report 2024 noted that 23% of its enforcement actions against unlicensed dealing involved pre-IPO companies that conducted public marketing of tokenised instruments.

Type 9 Licence: Asset Management and Fund Structures

Pre-IPO companies that operate a family office or a managed fund to pool investor capital before the listing must hold a Type 9 licence unless an exemption applies. The SFC’s Code of Conduct for Persons Licensed by or Registered with the SFC (January 2025 edition) paragraph 5.1 requires that all discretionary account managers hold a Type 9 licence. For a pre-IPO company structured as a Cayman Islands exempted company with a Hong Kong management office, the analysis turns on whether the management office exercises “discretion” over the fund’s investments. If the fund’s investment committee meets in Hong Kong and makes binding decisions, the SFC will deem the activity as occurring in Hong Kong, triggering the licensing requirement. The HKMA’s Supervisory Policy Manual module SA-1 (revised March 2024) provides a safe harbour for “incidental” asset management activities, but the burden of proof lies with the applicant. The SFC’s 2024-25 annual report recorded 14 enforcement actions against unlicensed asset managers, of which 6 involved pre-IPO fund structures.

The Regulatory Sandbox: A Structured Path to Compliance

The HKMA’s FSS 2.0 and the SFC’s Regulatory Sandbox for Virtual Asset Trading Platforms provide a formal mechanism for pre-IPO companies to test their business models under supervisory oversight before committing to a full licence application. These sandboxes are not exemptions from licensing; they are conditional waivers that allow the company to operate for a defined period while the regulator assesses the business. The key advantage for a pre-IPO company is that a sandbox acceptance letter from the HKMA or SFC can serve as evidence for the sponsor that the company is taking active steps to achieve regulatory compliance, satisfying HKEX Listing Rule 9.03(3) without requiring a full licence in hand.

HKMA FSS 2.0: Technology Risk and Data Privacy

The HKMA’s FSS 2.0, effective from 1 December 2024, expanded the sandbox’s scope to include artificial intelligence (AI) governance, data privacy, and cross-border data flow. For a pre-IPO company that uses AI for credit scoring or customer onboarding, the HKMA’s Guidelines on Use of Artificial Intelligence (October 2024) require that the company demonstrate “explainability” and “fairness” in its algorithms. The sandbox allows the company to run its AI model on a limited dataset under HKMA supervision, with the regulator providing written guidance on model validation. This written guidance is admissible as a regulatory comfort letter in the sponsor’s due diligence pack. The HKMA’s 2024 annual report noted that 18 fintech companies entered FSS 2.0 in its first quarter, with an average sandbox duration of 9 months. A pre-IPO company targeting a 2026 listing should apply for FSS 2.0 at least 12 months before the A1 submission to allow for the sandbox period and the subsequent licence application.

SFC Sandbox for Virtual Asset Platforms

The SFC’s sandbox for virtual asset trading platforms, established under the Guidelines for Virtual Asset Trading Platform Operators (June 2023), requires the platform to operate under a “restricted licence” that limits the number of clients, the types of virtual assets traded, and the total assets under custody. The SFC’s Licensing Handbook (January 2025 edition) paragraph 4.2.3 specifies that a sandbox participant must not hold more than HKD 500 million in client assets at any time. For a pre-IPO company, this cap may be restrictive, but it provides a clear regulatory path. The SFC will issue a “no-objection letter” upon successful completion of the sandbox, which the sponsor can use to satisfy HKEX’s requirement for regulatory approvals. The SFC’s 2024-25 annual report recorded 7 sandbox participants, of which 3 have since obtained full licences. Two of those three are now in the pre-A1 stage for a Main Board listing.

Exemption Arrangements: Structuring Around the Licence Requirement

For companies that cannot obtain a licence before the A1 submission, the alternative is to structure the business so that the regulated activity is carried out by a third-party licensee under a service agreement. This is the “outsourced regulated activity” model, commonly used by robo-advisory platforms and digital asset custodians. The SFC’s Guidelines on Outsourcing (December 2022) paragraph 3.1 requires that the outsourcing arrangement does not “materially impair” the licensee’s ability to supervise the activity. For a pre-IPO company, this means the sponsor must obtain a legal opinion that the outsourcing arrangement is valid under the SFO and that the licensee has adequate resources to supervise the outsourced function.

The Service Agreement Structure

Under this structure, the pre-IPO company holds no licence. Instead, it enters into a service agreement with a licensed corporation (LC) that holds the relevant Type 1 or Type 9 licence. The LC performs the regulated activity on behalf of the pre-IPO company, and the pre-IPO company pays a service fee. The key risk is that the SFC may deem the pre-IPO company as “carrying on” the regulated activity if the LC is a mere “front” or if the pre-IPO company exercises de facto control over the LC’s decisions. The SFC’s Code of Conduct paragraph 12.2 requires that the LC maintain “independent discretion” over investment decisions. A pre-IPO company that provides the LC with a pre-approved list of investments or that retains the right to veto trades will likely be deemed to be carrying on the regulated activity itself. The SFC’s Enforcement Report 2024 cited 3 cases where an outsourcing arrangement was re-characterised as unlicensed dealing.

The Exemption Letter from the SFC

In limited circumstances, the SFC may issue an exemption letter under Section 115(2) of the SFO, which allows the Financial Secretary to exempt a person from the licensing requirement if it is “not contrary to the public interest.” This exemption is rarely granted and is typically reserved for state-owned enterprises or companies with a public policy mandate. For a pre-IPO company, the more practical route is to obtain a “no-action letter” from the SFC, which states that the SFC will not take enforcement action if the company continues to operate without a licence for a defined period. The SFC’s Enforcement Report 2024 recorded 5 no-action letters issued, all to pre-IPO companies that had already submitted an A1 application and could demonstrate that a licence would be obtained within 6 months of listing.

Cross-Border Structuring: The BVI and Cayman Considerations

For pre-IPO companies incorporated in the British Virgin Islands (BVI) or Cayman Islands, the licence analysis must consider both Hong Kong law and the laws of the incorporation jurisdiction. The BVI’s Securities and Investment Business Act (SIBA) requires a licence for any person “carrying on investment business” in or from the BVI. A BVI-incorporated pre-IPO company that manages its own assets from a Hong Kong office may need a BVI licence if the company is deemed to be “carrying on business” in the BVI. The BVI Financial Services Commission’s (FSC) Guidance on the Application of SIBA (March 2023) paragraph 2.4 states that a company is deemed to be carrying on investment business in the BVI if its “central management and control” is in the BVI. For a pre-IPO company with a Hong Kong management office, the analysis turns on whether the board of directors meets in the BVI and whether the board makes substantive decisions. The sponsor should obtain a legal opinion from BVI counsel confirming that the company does not require a BVI licence, and this opinion should be included in the due diligence pack.

Cayman Islands: The Mutual Fund Exemption

Cayman Islands law provides a specific exemption for “private funds” under the Mutual Funds Act (2021 Revision). A pre-IPO company that operates as a closed-ended fund (i.e., a fund that does not offer redemption rights to investors) is exempt from the licensing requirements of the Securities Investment Business Act (SIBA) if it has no more than 15 investors and does not offer its shares to the public. The Cayman Islands Monetary Authority’s (CIMA) Guidance on the Private Fund Exemption (April 2024) confirms that this exemption applies to pre-IPO companies that raise capital from professional investors only. The sponsor must verify that the company’s constitutional documents include a restriction on the number of investors and that no public marketing has occurred. Failure to maintain this exemption can result in a CIMA enforcement action, which would be a material adverse fact for the listing application under HKEX Listing Rule 2.03(2).

Actionable Takeaways

1. Initiate the licence review at least 18 months before the A1 submission to allow for the sandbox period (9-12 months) and the full licence application (6-9 months), as the SFC’s processing time for Type 1 and Type 9 applications averaged 8.2 months in 2024 (SFC Annual Report 2024-25, p. 34).
2. Obtain a written legal opinion from Hong Kong counsel confirming that any tokenised equity or NFT offering falls within a specific exemption under SFO Section 103(3), and include this opinion in the sponsor’s due diligence pack to pre-empt a Listing Division comment letter.
3. If using an outsourcing structure, ensure the licensed corporation retains independent discretion over all investment decisions and that the service agreement explicitly prohibits the pre-IPO company from exercising veto rights or providing pre-approved investment lists.
4. For BVI or Cayman-incorporated companies, secure a legal opinion from local counsel confirming that the company does not require a licence under SIBA or the Mutual Funds Act, and that the company’s central management and control is in Hong Kong, not the offshore jurisdiction.
5. Apply for the HKMA FSS 2.0 or SFC sandbox at least 12 months before the A1 submission to obtain a written comfort letter from the regulator, which the sponsor can use to satisfy HKEX Listing Rule 9.03(3) even if the full licence is not yet granted.