In your case, you must implement smart contracts on top of your ERC-20.
What you're doing is more like a Security Token; in this case, you can use different standards such as:
ERC-1404 is another standard for security tokens, supposed to be more 'user-friendly',
Know Your Token Holders:
"Know who your token holders are at all times and maintain a whitelist of investor addresses. [...] the simple restricted token
standard helps token issuers manage their compliance requirements."
The ERC-1400 is a standard for security tokens with thorough guidelines and functions which include:
T-REX includes the following three core pillars:
Utility tokens can be transferred or exchanged very easily, but security tokens are subject to typical securities laws, they can only be issued to eligible investors, which can be retail, accredited/qualified, or institutional.
T-Rex solutions provide, inter alia:
Digital onboarding & initial token allocation
Token supply control (mint/burn/freeze)
Permissioned security tokens (T-REX standard)