Investor pools
To determine the legitimacy of security transfer operations, the tuple (sender, receiver, amount) is checked against a set of transfer rules of the corresponding security contract managed by the contract's approver.
In the default case, the rules are managed by Cashlink and each security is associated with a set of investor pools, each describing a list of investors that are allowed to hold securities of the given type. In addition to shared investor pools such as the Cashlink Qualified Investors which can optionally be enabled, every contract has a contract-specific default investor pool fully controlled via the API. Thus, if you want to allow an individual investor to receive securities, you can do so by adding the investor to the contract's default pool via the Investors API.