🇰🇾Cayman Islands

A Cayman foundation company is not a civil-law foundation and not a statutory DAO. It is a Cayman company with a foundation-company overlay. The Foundation Companies Act applies once the Registrar declares a company to be a foundation company, and the Companies Act continues to apply except where inconsistent with the Foundation Companies Act.

This is why the form works as an institutional wrapper. A Cayman company has corporate legal personality, perpetual succession, natural-person capacity, and capacity to hold property. It can contract, own IP, employ or engage service providers, hold treasury assets, sue, and be sued.

For DAO purposes, the legal benefit is not that Cayman law understands DAOs natively. The benefit is that the DAO can place legally cognizable functions into a recognized company: treasury ownership, grant-making, service agreements, licensing, exchange relationships, DAO-to-DevCo contracts, and dispute resolution. The weakness is that token governance must be deliberately mapped into the constitution, bylaws, contracts, delegation instruments, and operational procedures. It is not supplied automatically by statute.

The Cayman foundation company can provide limited liability through the underlying company form. A company may be limited by shares or by guarantee. In a guarantee company, member liability is limited to the amount each member undertakes to contribute to the company's assets on winding up. In a share company, member liability is limited by reference to unpaid share capital.

That limited-liability effect is useful against the unwrapped-DAO problem. If the foundation company is the contracting party, asset holder, IP owner, grantor, employer or contractor, and governance implementation vehicle, claimants are more likely to face a company as the legal target rather than a diffuse token community.

The limitation is attribution. Cayman law does not retroactively sanitize conduct that occurs outside the company. If token holders, multisig signers, founders, delegates, or developers act as an unincorporated group separate from the foundation, a claimant may still argue that the relevant legal relationship is an unincorporated association, general partnership, promoter group, joint venture, fiduciary arrangement, agency relationship, or issuer group under the applicable law of the forum. That risk is especially material where the token community votes on or executes actions without the foundation's constitution, board approvals, delegated authority, and records tying the action to the company.

The central Cayman issue is governance. The Foundation Companies Act is flexible, but it is not on-chain-native. A foundation company's constitution may provide for management by directors, however described, or by their delegates, and may give rights, powers, and duties to members, directors, officers, supervisors, founders, or others. It may also address admissions and removals, meetings, voting, supervision, enforcement, constitutional alteration, bylaws, dispute resolution, and winding-up arrangements.

That flexibility allows a Cayman foundation company to reference a DAO's governance process. For example, the constitution or bylaws can state that directors will consider token-holder votes, that certain matters require a governance proposal, that a supervisor or council monitors implementation, or that particular wallet or snapshot procedures are relevant to internal governance.

But this is not equivalent to statutory token governance. The Act does not say that token holders are members by reason of holding tokens. It does not provide a statutory default rule for governance-token-weighted membership. It does not treat smart-contract execution as corporate action by default. It does not vest management automatically in code. Bylaws can regulate implementation, but they do not form part of the company's constitution, and persons dealing with the company in good faith are not required to assess compliance with the bylaws.

Directors are not safe as passive conduits. Cayman authority confirms the orthodox fiduciary-duty position that directors owe duties to the company. In Tianrui v China Shanshui, the Judicial Committee analyzed the Cayman position against the background that directors' fiduciary duties are owed to the company, while recognizing that shareholders may have standing in certain improper-purpose allotment circumstances.

For DAO governance, the consequence is practical and material. Token-holder voting can guide or bind internal processes only to the extent the constitution, bylaws, contracts, and delegation arrangements lawfully make it relevant. A director who executes a token vote that breaches the company's objects, violates Cayman law, causes prohibited distributions, breaches AML or sanctions obligations, creates unlicensed VASP activity, or harms the company may face duty issues. The "directors are the bottleneck" critique is therefore directionally correct, though a sophisticated Cayman foundation can narrow the gap with careful drafting and delegated authority.

A Cayman foundation company may cease to have members if its memorandum so permits or requires, provided it continues to have one or more supervisors. Cessation of members does not affect the company's existence, capacity, or powers. A member or supervisor may also be a director, and the Act does not require supervisors to be different from directors.

This is one reason the Cayman foundation company became popular for protocol foundations. The structure can avoid conventional shareholder control and instead operate through directors, supervisors, objects, and constitutional enforcement rights. That can fit a protocol-stewardship model better than an ordinary exempted company.

But it remains a human-institutional model. The company must keep a register of supervisors, must maintain a qualified-person secretary, and must have a registered office at the qualified secretary's business address. If governance or supervision breaks down, the Grand Court can intervene, including by appointing or removing directors or supervisors or making winding-up orders.

For DAO design, this creates resilience but not autonomy. Court-supervised corporate repair mechanisms are useful for legal continuity. They are also inconsistent with the claim that the token community alone is always in legal control.

The Foundation Companies Act requires the memorandum to prohibit dividends or other distributions of profits or assets to members or proposed members as such. The Act excludes certain items from that prohibition, including beneficiary benefits, reasonable remuneration, indemnity or reimbursement, arm's-length transactions, and certain winding-up surplus benefits.

This makes the Cayman foundation company better suited to protocol governance than to economic participation. It can fund developers, hold assets, make grants, own or license IP, sponsor ecosystem development, and operate a treasury for its objects. It is a poor fit for a DAO whose token holders are intended to receive dividends, revenue shares, redemption rights, buyback entitlements, liquidation participation, or other equity-like economics through the foundation.

This also affects securities and fund analysis. A token with genuine governance utility and no economic rights is easier to defend than a revenue-sharing or treasury-claim token. But Cayman foundation law does not itself create a securities-law safe harbor. Unlike the RMI DAO Act, Cayman foundation-company legislation does not state that nonprofit governance tokens with no economic rights are not securities.

Cayman's VASP regime is activity-based. The Act defines virtual assets broadly as digital representations of value that can be digitally traded or transferred and used for payment or investment purposes, while excluding virtual service tokens from the virtual-asset definition. Regulated virtual-asset services include issuance of virtual assets, exchange between virtual assets and fiat, exchange between virtual assets, transfer of virtual assets, virtual-asset custody, and participation in or provision of financial services related to virtual-asset issuance or sale.

The 2026 amendment narrows and clarifies "issuance of virtual assets" by tying it to sales of newly created virtual assets to the public in or from the Islands for consideration, and by excluding virtual service tokens and specified tokenized fund instruments issued under the mutual-funds or private-funds framework.

A Cayman foundation company that merely recognizes off-chain or on-chain votes by governance-token holders is not necessarily carrying on virtual-asset service business. But there is no statutory rule that "governance tokens are outside VASP, period." If the foundation issues tokens to the public in or from Cayman, operates or controls a token sale, provides financial services related to token issuance, administers a treasury-transfer service for others, controls wallets for customers, provides custody, or operates a decentralized or centralized exchange/trading platform for a fee or benefit, the VASP Act can become central.

Since Phase Two, CIMA requires licensing for virtual-asset custody and trading-platform services in or from Cayman. Other VASP activity generally requires registration unless a supervised-person waiver or other statutory route is available. CIMA's circular also states that a waiver application requires a formal independent legal opinion, so "no legal opinion required" is not a safe general statement once the structure enters the VASP perimeter.

The Cayman foundation company is not anonymous. The Foundation Companies Act requires a qualified-person secretary, and the company, directors, officers, and interested persons must provide the secretary with information the secretary requires to comply with obligations under the Proceeds of Crime Act, Terrorism Act, and AML Regulations. A foundation company may not accept a gratuitous or consideration-based asset contribution unless the secretary gives a no-objection notice.

The Beneficial Ownership Transparency Act expressly applies to foundation companies. A beneficial owner includes an individual who ultimately owns or controls at least the statutory ownership or voting threshold, otherwise exercises ultimate effective control over management, or otherwise exercises control. If no beneficial owner can be identified, the legal person must identify a senior managing official contact person.

Beneficial-ownership information is not the same as a fully public member registry, but it is accessible through the statutory search platform to Cayman authorities such as law enforcement, customs, the Financial Reporting Authority, CIMA, the Anti-Corruption Commission, and the Tax Information Authority, and in limited cases to specified institutions and professions. Non-compliance can lead to administrative fines, criminal penalties, and ultimately strike-off, removal, or dissolution.

If the foundation is a VASP, Cayman AML requirements become more intensive. The AML Regulations contain specific virtual-asset transfer provisions requiring originator and beneficiary information, verification, transmission of information with transfers, systems for missing information, risk-based rejection or suspension policies, and suspicious-activity reporting to the FRA. Corporate officers and persons concerned in management or control can face liability in specified circumstances involving consent, connivance, or neglect.

The correct Cayman privacy conclusion is therefore narrow. Cayman can avoid making every governance-token holder a shareholder of record, and a memberless foundation company can avoid conventional shareholder control. But founders, directors, supervisors, controllers, beneficial owners, secretary-facing parties, regulated activity participants, counterparties, grant recipients, treasury operators, and VASP customers may fall within KYC, KYB, AML, beneficial-ownership, sanctions, tax, or counterparty diligence processes.

Cayman is a tax-neutral jurisdiction in the domestic direct-tax sense. Official Cayman government materials state that the Cayman Islands has no income tax, company or corporation tax, inheritance tax, capital gains tax, or gift tax. That point explains why Cayman has historically been attractive for protocol foundations and offshore holding structures.

But tax neutrality is not the same as tax irrelevance. A Cayman foundation company may be subject to economic-substance obligations if it is a relevant entity carrying on a relevant activity. The Economic Substance Act requires core income-generating activities, direction and management in Cayman, adequate operating expenditure, adequate physical presence, and adequate personnel in Cayman for relevant activities. The "directed and managed" component includes board knowledge, board meetings in Cayman, Cayman quorum, minutes recording strategic decisions, and records kept in Cayman.

For a DAO foundation, the highest-risk areas are IP ownership, licensing, headquarters functions, fund management, financing and leasing, and service-center activity. If the foundation simply holds protocol treasury assets and makes grants, the analysis may be different from a foundation that owns and licenses core protocol IP, manages commercial rights, receives fees, directs a DevCo, or monetizes token-related assets. The tax and substance answer therefore depends on the actual functions placed inside the foundation company.

Foreign tax remains separate. U.S., EU, UK, Singapore, Swiss, UAE, or other resident founders, developers, token holders, treasury signers, delegates, contributors, DevCos, and service providers can still have domestic tax, reporting, payroll, VAT/GST, withholding, transfer-pricing, CFC, permanent-establishment, or anti-deferral obligations. Cayman incorporation does not determine those outcomes.

Cayman is not sanctions-neutral. CIMA states that Cayman's sanctions framework is essentially the same as the United Kingdom's and that UK Orders in Council extend sanctions regimes to the Overseas Territories with force of law. CIMA also expects financial service providers to maintain systems and controls to comply with sanctions obligations and to report and freeze where required.

The Cayman FRA similarly states that all UN and UK designations have immediate effect in the Cayman Islands. That means a Cayman foundation must treat sanctions screening, wallet exposure, grant recipients, contributors, treasury transactions, service providers, counterparties, token distributions, and governance participation as compliance issues where there is a sanctions nexus.

For a DAO, this is operationally harder than for a conventional company. On-chain interaction can involve pseudonymous wallets, secondary-market token holders, delegated votes, airdrops, liquidity incentives, grants, bridges, mixers, and smart-contract counterparties. A Cayman foundation should not assume that decentralization excuses sanctions screening or reporting where the foundation or its service providers control assets or make payments.

The claim that Cayman is "EU-blacklisted" requires correction as of the as-of date. The current Council of the EU list of non-cooperative jurisdictions for tax purposes does not include Cayman in Annex I. Instead, the Council's current materials list Cayman among jurisdictions cooperating with the EU with no pending commitments.

Cayman is also not on FATF's current high-risk jurisdictions subject to a call for action, and it is not on FATF's current increased-monitoring list. The FATF high-risk jurisdictions currently identified in the official materials are DPRK, Iran, and Myanmar; Cayman is not among the grey-list jurisdictions shown in the same official source.

Cayman is not on the European Commission's current AML high-risk third-country list reviewed for this analysis. This matters because "EU-blacklisted" can refer to different official lists, and the answer differs by list and date.

The UN point should not be framed as a country blacklist. The UN Security Council Consolidated List is a list of individuals and entities subject to Security Council measures, not a general offshore-jurisdiction blacklist. The relevant question is whether any DAO, foundation, beneficial owner, director, supervisor, wallet, counterparty, service provider, or asset flow involves a designated person or applicable sanctions regime.