Learn what belongs on-chain and off-chain when building compliant RWA tokens without exposing PII or weakening transfer enforcement.