Karsten Wenzlaff, Advisor
August 26th, 2025
August 19, 2026 | NCFA Resource | Cybersecurity And Fraud, Risk Compliance And Regtech, Capital Markets And Market Infrastructure

In August 2026, the Financial Industry Regulatory Authority published Cybersecurity Effective Practices, a 12-part framework for FINRA member firms reviewing cybersecurity programs, controls and operating procedures. A firm can use the resource as a structured checklist for who owns cybersecurity, which systems and vendors create risk, who can access sensitive data, how threats are detected, and whether the business can recover when systems fail. FINRA designed the practices to scale with firm size, business model, technology complexity and risk profile.
FINRA organizes the resource around 12 areas:
The framework starts with accountability and risk ownership. FINRA recommends a designated cybersecurity lead, regular reporting to senior decision makers, documented policies and periodic reviews, while also making cyber risk part of decisions about new technology, systems and operating changes. From there, firms are expected to identify the information, systems and business functions they depend on, assess threats such as ransomware, insider activity and vendor exposure, test important systems for weaknesses and revisit those risks when technology or operations change.
Third party risk receives detailed treatment. FINRA treats vendors with access to customer information or critical systems as part of the firm’s security perimeter. Firms should know which vendors have access, understand important fourth party relationships and identify which providers support critical operations. Contracts can address audit rights, data handling, breach notification and visibility into subcontractors, while ongoing oversight should include access monitoring and a documented process for removing access and handling customer information when a relationship ends.
That concern extends beyond US broker dealers. Weak access control governance can expose sensitive information when a partner or service provider retains permissions that are unnecessary or poorly monitored. FINRA’s guidance connects vendor governance with the practical question of who can access systems and data, for how long, and under what controls.
Asset management and access control fit naturally together. FINRA recommends keeping a current inventory of hardware, software, cloud services and data flows, assigning owners to important assets and identifying systems that no longer receive security updates. Once firms know what they have, they can control who gets access through unique credentials, role based permissions, multifactor authentication, periodic entitlement reviews, segregation of duties and least privilege. Access should also be changed or removed promptly when employees change roles or leave.
Data protection, training and patching cover another part of the operating picture. Firms are encouraged to classify sensitive data, encrypt it at rest and in transit where feasible, control retention and protect backups, including with immutable or air gapped storage. FINRA also recommends ongoing employee training, role specific instruction for staff with sensitive access and phishing simulations backed by records of participation. Vulnerability management should include regular scanning, risk based patch priorities and verification that remediation work was completed rather than assumed.
The primary users are FINRA member broker dealers, including compliance teams, cybersecurity leaders, technology teams, operations executives and senior management. Smaller firms can use the 12 areas to identify where basic controls are missing without trying to copy the cybersecurity program of a much larger institution, while larger firms can use the same structure to review whether responsibilities, documentation and technical controls are working together.
Technology providers, managed security firms, consultants and RegTech companies serving broker dealers can also use the resource to understand what clients may expect around access, logging, vendor controls, data handling, patching, incident response and recovery. Boards and senior executives can use it as a governance checklist because FINRA makes cybersecurity ownership, management reporting, resource decisions and documented risk acceptance part of the program rather than leaving cyber risk entirely with the technology team.
The main strength is that FINRA connects governance directly to operating controls. A firm can follow the framework from senior accountability through asset inventories, identity controls, encryption, training, monitoring and recovery testing, which makes the document more useful than a high level cyber policy statement.
Third party risk is also handled with more depth than a basic checklist. Firms are expected to understand vendor dependencies, monitor privileged access, address fourth parties and plan how systems and data will be handled when a provider relationship ends. Security monitoring extends that discipline to unusual access, suspicious data transfers, system changes and privileged accounts, with logs retained long enough to support operations, investigations, forensic work and applicable recordkeeping requirements.
The framework also includes threat intelligence, incident response and recovery. FINRA recommends using relevant threat feeds, updating defenses as attack methods change and participating in trusted information sharing networks. Incident response focuses on how a firm detects, escalates and contains an event, while recovery planning deals with how critical systems and data return to service afterward. Tested backups, tabletop exercises, offline procedures and defined Recovery Point Objectives and Recovery Time Objectives all help firms decide how much data loss and downtime different systems can tolerate.
The main limitation is jurisdiction. FINRA developed the resource for US member firms and connects several practices to US requirements, including SEC Regulations S-P and S-ID, FINRA Rules 3110 and 4370, and Exchange Act recordkeeping rules. The document also doesn't create new legal or regulatory requirements or reinterpret existing ones. For Canadian financial technology and service firms, its best use is as a practical comparison and control review, not as a statement of Canadian regulatory obligations.
FINRA Cybersecurity Effective Practices (12-part cybersecurity control framework)
Cybersecurity Effective Practices PDF (downloadable nine page resource)
Small Firm Cybersecurity Checklist (small firm program checklist last reviewed February 2024)
Core Cybersecurity Threats And Controls (small firm threats and control questions)
FINRA Cybersecurity Resources (cybersecurity tools, guidance and related material)
2026 Cybersecurity And Cyber Enabled Fraud (current threats and effective practices)
Proposed Class Action Targets Equifax Access Controls (access governance and third party permissions)
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 14, 2026 | NCFA Companies On The Move | Artificial Intelligence And Data, Risk Compliance And Regtech, Banking And Credit

Fisent Technologies is a Toronto enterprise AI company founded in 2021 by Adrian Murray. Its BizAI platform reads and interprets unstructured content such as applications, claims, statements, contracts and correspondence, then turns the results into data and actions that existing business workflows can use.
The company now has enough operating evidence to look beyond the technology itself. Fisent says BizAI has more than 20 enterprise use cases in production, with customers across banking, lending, wealth management, insurance and other industries. Public examples include Aruba Bank through Orco Group, AEGIS London, CMG Financial and Westinghouse.
On August 11, Fisent closed a US$4.3 million venture round led by FINTOP, bringing disclosed funding to US$6.3 million. The financing arrives after Fisent reported 206% revenue growth in 2025, 173% net revenue retention and a third consecutive year without customer churn. Those percentages are company-reported, and Fisent does not disclose the revenue amount or total customer count.
Banks, insurers and other large companies still receive important information in documents, emails, forms, scans and files that don't arrive in one clean structure. Employees have to read the content, decide what it means, enter the relevant information and route the work. Fisent is selling automation into that gap.
In 2024, Orco Group used BizAI at Aruba Bank to process documents following its acquisition of CIBC FirstCaribbean operations. The company case study reports a 90% decrease in errors, more than 70% faster processing and capacity for as many as 10,000 unstructured documents a day. Those are customer case-study results, not audited benchmarks.
In mortgage lending, CMG Financial selected BizAI for underwriting and processing workflows. AEGIS London has deployed it for insurance endorsement processing. Outside financial services, Pega independently featured Westinghouse and Fisent at PegaWorld 2026, describing a live workflow that combines Fisent's AI with Pega automation to improve parts fulfillment and route exceptions to people.
Those examples give Fisent something many enterprise AI companies still lack, which is proof that customers are putting the software into operating workflows. That is especially useful in regulated finance, where AI adoption depends on controls, data quality and third party oversight as much as model capability.
Adrian Murray, Founder and CEO, Fisent:
“Enterprises are moving beyond AI experimentation and choosing the capabilities they can trust to operate at scale.”
BizAI can classify content, split complex files, extract information, verify it against defined criteria, analyze context and standardize tables. Fisent lets customers choose different models and hosting options, then uses its GenAI Efficacy Framework to compare model configurations on measures such as accuracy, speed, consistency and cost.
That model flexibility is important when a bank or insurer doesn't want one provider deciding where its data is processed or which model supports every use case. Fisent says its default architecture retains no customer content and does not use customer data to train models. The company completed a SOC 2 Type II examination in 2025 and says its controls were expanded during that year's review.
BizAI Studio launched in May 2026, giving business and automation teams a visual environment to design, test, deploy and maintain workflows with review gates, versioning and traceability. That changes where Fisent competes. A customer can build directly with a model provider, use AI functions inside a large workflow platform, buy a document-processing product or use Fisent as the content intelligence layer between models and existing systems. Fisent has to keep earning that position as larger platforms add their own AI capabilities.
Pega is particularly important because it is both an investor and a workflow partner. That relationship gives Fisent a route into enterprise processes already running on Pega, while also making the surrounding platform ecosystem part of its distribution strategy. Governed financial AI increasingly depends on exactly these workflow controls: permissions, evidence, review, escalation and records of what the system did.
Pricing isn't public. Fisent reports strong growth in licensing revenue and enterprise expansion, but contract size, recurring revenue mix and implementation economics remain private.
Fisent's bottleneck is changing. It already has product and deployment evidence. The next job is selling and implementing it repeatedly across more large enterprises.
The US$4.3 million round is Fisent's first priced venture financing and follows US$2 million of earlier disclosed investment from investors including Pega, Cloudberry Pioneer Investments and Sand Dollar Capital. Pega participated again in the FINTOP round, and FINTOP Partner John Philpott is joining Fisent's board.
FINTOP says its strategic investor network includes about 100 banks with US$1.3 trillion in combined assets, along with other financial services companies. That network doesn't automatically give Fisent 100 prospects, pilots or customers. It does put an investor with deep financial institution relationships beside a company trying to sell regulated enterprise AI.
Fisent says the new capital will expand sales, customer enablement, deployment engineering and product development while widening distribution through workflow and technology partners. Those uses fit the current stage. Enterprise AI can fail commercially even when the model works if implementation takes too much specialist effort or every customer becomes a custom project.
Fisent reports impressive growth in 2025 with 206% total revenue growth, 365% licensing revenue growth and 173% net revenue retention. It says customers now run more than three BizAI implementations on average, 90% added at least one production use case during 2025 and none has churned in three years.
Those numbers reflect expansion inside existing accounts. They don't tell us how large Fisent is in absolute terms. Revenue, profitability, valuation, contract values and total customer count are not public. Its first Fortune 50 customer in 2026 is also a company-reported milestone and the customer has not been named.
The evidence puts Fisent beyond initial validation without placing it in the same scale category as established enterprise platforms. Its current position is best described as Accelerate / Commercialize: real production use, repeat deployments and rising revenue, with absolute scale still private.
The FINTOP round raises the commercial bar. More named financial institution deployments, a larger base of repeatable implementations and evidence that BizAI Studio reduces deployment work would show that Fisent can grow without services effort rising at the same pace as software adoption.
On the NCFA Financial Innovation Map, Fisent sits where enterprise AI, workflow automation, financial operations and regtech meet.
The Company Intelligence Snapshot below follows the evidence that brings Fisent from formation into its current commercialization stage.
Adrian Murray founded Fisent in Toronto in 2021 after more than a decade working in financial services technology and operations, including core banking, digital banking, compliance, regtech and payments.
FisentToronto financial technology company
FoundationCompany formation and early product work
PrivateEarly financing details not publicly disclosed
Financial ServicesBanking technology, compliance and operations
UnavailableEarly customer evidence is not public
Enterprise AutomationWorkflow and financial technology providers
Fisent's foundation gives the company operating knowledge of financial institutions before generative AI becomes its commercial focus.
Information notice: Private company estimates are identified and attributed. Information may change after the stated update date. This content is provided for informational purposes only and does not constitute investment, financial or legal advice.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 7, 2026 | NCFA Insight | Capital Markets And Market Infrastructure, SME Finance And Business Banking, Public Sector Policy And Industrial Strategy

Canadian venture capital reached $2.69 billion across 250 deals in the first half of 2026, according to the CVCA's latest market data. Capital invested rose 17% from H1 2025, the first year-over-year increase in first-half dollars since 2021.
Deal count moved the other way. It fell 8.8% from 274 to 250, marking a fifth consecutive first-half decline, while average financing size increased from $8.4 million to $11.38 million.
Canada is putting more venture capital to work without funding more companies. Larger rounds are lifting the national total while seed financing continues to weaken.
| H1 2026 | Capital | Deals | Avg. Deal | YoY |
|---|---|---|---|---|
| Total VC | $2.69B | 250 | $11.38M | Capital +17%; deals -8.8% |
| Seed | $285M | 82 | ~$3.5M | Capital -31%; deals -13% |
| Early Stage | $1.18B | 68 | ~$17.4M | Capital +29%; deals essentially flat |
| Later Stage | $984M | 18 | $54.67M | Capital +23%; eight fewer deals |
Sixteen rounds of $50 million or more absorbed $1.57 billion, or 59% of all capital invested. Five financings above $100 million alone accounted for $807 million, equal to 30% of the national total.
Most transactions were much smaller. Deals below $25 million represented 85% of disclosed financings but received only 32% of the money. Another 155 rounds closed below $5 million and collectively attracted $221 million.
The same pressure is visible on the fund side. Canadian VC fundraising became more concentrated in 2025, leaving more capital in fewer hands and raising the bar for companies trying to get into institutional portfolios.
Seed is the clearest warning in the report. Investment fell 31% to $285 million across 82 deals, while transaction count declined 13%. Pre-seed added $52 million across 56 financings, with an average round below $1 million.
Early stage looks healthier at $1.18 billion, up 29%, but the number of financings barely changed. More capital went into roughly the same number of companies, pushing the average early-stage round to about $17.4 million.
Later-stage financing is even more concentrated. The $984 million invested was spread across only 18 transactions, the lowest first-half deal count in CVCA's series. The average round reached $54.67 million.
For founders, companies with traction and scale can still attract large rounds, while the market for the first few million dollars is getting tighter.
Some of that friction is structural. Smaller Canadian financings can carry disproportionately high compliance costs because many legal, disclosure and regulatory costs do not get proportionally cheaper as the raise gets smaller. Ontario's decision to join Canada's securities passport should reduce some duplication, but it does not by itself solve the economics of small-company financing.
There is also a financing-fit problem. Merchant Growth founder David Gens argues that many smaller businesses are asset light and cash-flow driven, while traditional lending still relies heavily on assets that can be pledged as collateral. After nearly $1.5 billion deployed to about 15,000 Canadian small businesses, his point is practical: access to capital and access to financing that fits the business are not the same thing.
Those problems compound. A company may need grants, founder capital, crowdfunding, angel money, debt and venture financing at different points in its growth. Canada's small-business capital access gap is therefore less about finding one missing source of money than making it easier for companies to move from one financing stage to the next.
If fewer businesses get financed near the bottom, fewer can build the traction needed to compete for the larger rounds that are keeping Canada's headline VC numbers up.
Financial technology supplied four of the larger disclosed rounds in the first half. KOHO raised $130 million, nesto $107 million, Float $85.4 million and Relay $68.8 million. Together they represent almost $392 million in financing.
KOHO has been building toward banking scale, adding credit products and pursuing a Schedule 1 bank licence. Its $130 million Series E was one of the largest disclosed Canadian VC financings in H1.
Float has been expanding its SME finance platform across business accounts, spend management and working-capital products. Its $85.4 million H1 financing followed earlier equity financing and continued expansion into business banking and credit.
Relay has been scaling its SMB finance platform, raising US$50 million in its Series B as it expanded banking and cash-flow tools for small businesses. The CVCA records its H1 2026 financing at $68.8 million in Canadian-dollar terms.
These companies already have products, customers and operating histories. Their ability to attract larger rounds shows where capital is still available, while the weaker seed numbers show how much harder it may be for the next group to reach that point.
U.S. investors participated in 28.0% of Canadian VC transactions in H1, up from 25.9% in 2025. European participation reached 10.8%, the highest share in the six-year series, while 66.4% of transactions were financed exclusively by Canadian investors.
The money also remains geographically concentrated. Ontario, Quebec and British Columbia accounted for 91% of capital and 80% of transactions. Toronto led with $879.7 million across 64 deals, followed by Montreal with $619 million across 50.
For founders that reach scale, Canada remains connected to large domestic and international pools of capital. For investors, the concern is whether enough new companies (read: Canada's farm team) are being financed underneath them to keep producing attractive later-stage opportunities.
H1 2026 looks better than H1 2025 if the measure is dollars invested. It looks weaker if the measure is how many companies received venture financing, and weaker again at seed.
For founders, proof of traction and financing readiness carry more weight in a selective market. For investors, larger rounds remain available, but a shrinking seed base can become a sourcing problem several years down the road.
Canada needs capital at both ends. Proven companies need enough money to scale, while younger companies need financing that fits where they are today and gives them a realistic way to reach the next stage. The CVCA numbers show stronger deployment at the top of the market, but they don't show yet at the mid way point of 2026 that the pipeline feeding it is getting healthier.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 7, 2026 | NCFA Market Activity | Artificial Intelligence And Data, Cybersecurity And Fraud, Risk Compliance And Regtech

On August 5, 2026, Meta released Muse Code in beta, a terminal-based coding agent that can plan changes, write code, validate results and divide larger jobs among parallel sub-agents across software repositories.
The timing of the announcement is more interesting than the launch alone. In less than three weeks, Moonshot released the 2.8-trillion-parameter Kimi K3 as an open-weight model built for reasoning and long-horizon coding, OpenAI cut the price of GPT-5.6 Luna by 80%, DeepSeek launched V4-Flash at $0.14 per million input tokens and Alibaba unveiled the 2.4-trillion-parameter Qwen3.8-Max.
Coding agents are taking on more of the engineering job while the models underneath them are getting cheaper and easier to mix and match.
For fintechs and financial institutions, that makes the buying decision less about which model tops a benchmark and more about what useful work gets completed, at what cost and under which controls.
| Date | Development | Key Data | What Changed |
|---|---|---|---|
| Jul. 17 | Kimi K3 | 2.8T parameters; 1M-token context; open weights | Moonshot added a very large open-weight option designed for advanced reasoning and long-horizon coding. |
| Jul. 30 | OpenAI GPT-5.6 Luna | Input cut from $1.00 to $0.20/M; output from $6.00 to $1.20/M | OpenAI cut Luna pricing 80% as business customers pushed harder on AI costs and lower-cost competition intensified. |
| Aug. 3 | DeepSeek V4-Flash | $0.14/M input; $0.28/M output; about $0.03 average benchmark-test cost | DeepSeek pushed the price floor sharply lower, although its overall intelligence score remains below the strongest frontier models. |
| Aug. 3 | Qwen3.8-Max | 2.4T parameters; 1M-token context; 95B parameters active per request | Alibaba expanded the open-weight option for large-context and agentic workloads while using a mixture-of-experts design to reduce compute requirements per request. |
| Aug. 5 | Meta Muse Code | $1.25/M input; $4.25/M output | Meta entered long-running agentic coding with parallel sub-agents and a persistent activity log. |
The price cuts do not mean every engineering job is suddenly cheap. Agentic work can consume substantially more compute because agents inspect repositories, call tools, run tests, retry failed work and sometimes launch other agents.
Cursor has already changed its pricing around that reality. It says a difficult agent request can consume an order of magnitude more tokens than a simple request, such as a syntax question. In June, Cursor also introduced a $120 monthly Premium team seat with five times the included usage of its $40 Standard seat and added stronger spend alerts for administrators.
That makes cost per million tokens a weak buying metric on its own. A fintech should care more about the cost of a completed engineering task after model calls, retries, testing and developer review.
Another important change is that choosing a coding environment no longer always means committing to one model provider.
Qwen Code is an open-source terminal agent that supports OpenAI-, Anthropic- and Gemini-compatible APIs, Alibaba Cloud, other providers and bring-your-own API keys. GitHub Copilot and Cursor also offer access to multiple models inside their development environments.
That creates two buying decisions. Which agent should work with the codebase, and which model should do the reasoning underneath it. A financial firm could use one managed development interface while selecting different models for cost, capability or internal risk requirements.
Open-weight does not mean free. The firm still has to pay to run the model or provide the computing infrastructure, monitoring and security needed to operate it itself. Commercial terms are also evolving. Alibaba is reportedly preparing revenue-sharing requirements for some large commercial users of Qwen3.8-Max, following a similar approach used by Moonshot for Kimi K3.
Codex and Claude Code are already competing for larger repository-level assignments. Meta now joins a field where workflow, model choice, governance and billing can matter as much as raw coding performance.
| Platform | Current Cost | Model Choice | Enterprise Difference | Best Fit |
|---|---|---|---|---|
| GitHub Copilot | Business $19/user/mo; Enterprise $39 | Broad model catalogue | Cloud agent, code review, access and budget controls, governance, IP indemnity and pooled AI credits | Banks and fintechs already standardized on GitHub and Microsoft development workflows |
| Claude Code | Pay-as-you-go for Team and Enterprise through Anthropic Console | Anthropic models | Filesystem and network sandboxing; Enterprise adds SSO, SCIM, fine-grained permissions and audit logs | Complex delegated work where containment and access controls carry more weight |
| OpenAI Codex | Included with ChatGPT Business at $20/user/mo annually; extra usage is token-linked through credits | OpenAI models | Business workspace controls, budgeting, SAML SSO, MFA and no training on business data by default | Teams already using OpenAI across engineering and business workflows |
| Cursor | Teams Standard $40/user/mo; Premium $120 | Multiple frontier and first-party models | AI-native editor, cloud agents, usage pools and spend controls | Engineering-led fintechs willing to make AI central to the development environment |
| Amazon Q Developer | Pro $19/user/mo | AWS-managed models | IDE and CLI agents, IAM Identity Center support, admin dashboards, application transformation and IP indemnity | AWS-heavy financial firms |
| Gemini Code Assist | Standard about $19/user/mo annually; Enterprise about $45 | Google models | Agent mode and Gemini CLI; Enterprise adds private code customization and higher agent usage | Google Cloud development environments |
| Meta Muse Code | $1.25/M input; $4.25/M output in beta | Muse Spark 1.2 | Large-repository work, parallel sub-agents and persistent task history | Worth testing, but enterprise maturity is still unproven during beta |
| Qwen Code | Open-source agent; provider or infrastructure costs vary | Multi-provider and bring-your-own-model | Separates the coding interface from the model provider and supports sub-agents | Firms prioritizing portability, lower-cost inference or more control over the model layer |
There isn't a universal winner (yet?).
GitHub Copilot has the cleanest operational fit where GitHub already anchors development.
Amazon Q and Gemini Code Assist benefit from existing cloud relationships.
Claude Code and Codex are stronger candidates where teams want to hand over larger engineering assignments.
Cursor asks firms to make AI more central to the development environment.
Muse Code is too new to put in the same enterprise-maturity category. Its price and multi-agent design are competitive.
Meta still has to show how it performs inside real development teams and which administrative controls follow the beta.
Qwen Code offers a different choice. Firms can keep the coding interface more portable and compete the model layer separately, which becomes more valuable when model prices can fall 80% in a matter of weeks.
A coding agent becomes more useful as it gains permission to read repositories, edit files, run commands, call tools and execute tests. Those permissions also increase the consequences of an incorrect instruction, compromised dependency or bad code change.
Anthropic says sandboxing reduced Claude Code permission prompts by 84% in its internal use by giving the agent defined filesystem and network boundaries rather than asking a developer to approve every action.
For financial firms, security and oversight need to be part of the comparison alongside coding quality. That includes who can access the agent, what repositories it can reach, what activity gets logged, how data is handled, whether code is used to train models, what networks it can connect to and how spending is controlled.
The market is changing quickly. Open-weight models are pushing down prices, coding tools can increasingly work with more than one model, and agents are taking on larger jobs that make simple token-price comparisons less useful.
Banks and fintechs should be prudent and practical. How much usable engineering work did the agent complete, what did it cost, how often did a developer need to step in and did the work stay within the firm’s security and approval rules?
As coding agents and models become easier to mix and match, should financial firms standardize on one managed platform or keep the agent, model and infrastructure layers separate so each can compete on capability, cost and control?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 4, 2026 | NCFA Insight | SME Finance And Business Banking, Capital Markets And Market Infrastructure, Public Sector Policy And Industrial Strategy

On July 30, 2026, the U.S. Securities and Exchange Commission announced that its Small Business Capital Formation Advisory Committee would reconvene on August 6, 2026. The committee will continue work on public market access and capital formation for smaller companies.
On July 27, 2026, the SEC delivered its 2026 Small Business Forum report to Congress. The annual Forum brings founders, investors, intermediaries and policymakers together to develop and prioritize recommendations. The standing committee continues the work between forums and advises the SEC on rules affecting private companies and smaller public issuers.
The process isn't a fast track to reform. Some recommendations become rules, some need Congress and others return for years without a final answer. But what's really valuable is the public record. A market problem gets an owner, a recommendation, a response and a history that can be checked later.
The combined U.S. record contains 426 recommendations from the Forum between 2012 and 2026 and the committee between 2019 and 2026. That total includes repeated calls for the same reform. Finders and limited capital introduction, for example, appeared 29 times. A proposed federal framework arrived in 2020, but no final order was identified by August 3, 2026. By contrast, a 2019 committee recommendation to raise the Regulation Crowdfunding limit was reflected in the 2020 Regulation Crowdfunding reforms that increased the ceiling to US$5 million and removed investment limits for accredited investors.
Canada's financing files are moving too. The federal government is committing C$1 billion to the Growth VCCI program, while Ontario develops professionally managed funds that could give retail investors access to private assets. Both initiatives can widen the market. Neither creates a standing way to identify the gaps between a financeable company and the investors prepared to back it.
The U.S. hasn't solved small business finance. It has kept company access, investor access and market rules in the same public conversation. Canada has consultations and capable institutions, but no single process currently connects those questions and tracks the response from one review to the next.
Financing policy usually arrives in separate files. One initiative supports venture funds. Another considers retail access to private assets. Regulators review an exemption while economic development agencies provide loans, grants or commercialization support. Companies experience those programs as one market when they have to move from one source of capital to another.
The U.S. Forum keeps more of that system in view. Its 2025 Small Business Forum report connected early capital, accredited investor access, Regulation Crowdfunding, smaller funds, retail access to private markets, secondary trading and the cost of becoming public. Not every proposal deserves approval. Keeping them together shows how one decision affects the rest of the market.
A capable business may begin with customer revenue or a grant, add community or angel capital and later reach strategic, institutional or public investors. NCFA's analysis of who gets access to capital shows why that path is uneven. Geography, networks and investor relationships can determine which businesses get seen before investment merit is even tested.
Managed funds and direct investing serve different markets. Ontario's Long Term Asset Fund Project could give households professionally managed exposure to a diversified portfolio of private assets. Investors still choose the manager rather than the companies. Fees reduce returns, private assets can be hard to value and redemption windows can limit access to cash. The fund may also invest outside Canada or buy existing interests, so retail access doesn't guarantee new financing for Canadian businesses.
Direct equity crowdfunding lets people choose a business and can turn customers or local supporters into investors. The tradeoff is concentrated company risk, less information than a public company provides, possible dilution and little chance to sell for years. Platforms also need enough credible issuers and active investors to cover compliance and operating costs. Canada needs both routes because they serve different investors and finance different companies.
Canada's estimated equity crowdfunding market (NI 45-110) equals only C$5.15 million in 2025. Comparable markets generate between six and thirteen times more funding relative to their business base.
Why? Canada's lower issuer ceiling, tighter retail investor limits and divided portal and dealer model don't explain the entire gap. They do restrict how much a company can raise, how much ordinary investors can contribute and whether smaller offerings are economical for intermediaries to support.
Canada would need roughly C$41 million to C$45 million more of annual activity to match Australia after adjusting for the number of people or employer businesses in each country. That is about eight to nine times Canada's estimated 2025 market.
The United Kingdom provides a useful scale check, but not a perfect annual match. Its broader equity crowdfunding market raised £324 million across 297 rounds in 2024, or about C$567 million at the Bank of Canada's 2024 average exchange rate. The year and reporting method differ from the Canadian, U.S. and Australian figures, so the UK number is directional. It still shows how small Canada's investment crowdfunding retail market remains.
The jobs record is less complete. Crowdfund Capital Advisors estimates that U.S. Regulation Crowdfunding has financed more than 8,100 companies since 2016 and created or supported over 430,000 direct and indirect jobs. It also estimates more than US$27.1 billion in economic activity. Those are industry estimates, not official SEC statistics.
An earlier British Business Bank study of successful UK raises found that 39% of companies hired an average of 2.2 employees after raising equity or debt crowdfunding. Another 48% intended to hire. Within three months, 28% had completed angel or venture financing and 43% were in discussions with institutional investors. The study is from 2015 and combines equity and debt models, so it describes company results rather than a current national total.
Australia's 2025 report says 25% of successful offers came from companies returning for another raise, but it does not provide a national jobs figure. Canada doesn't publish an equivalent job or later financing series either. The missing comparison is part of the problem, not a reason to invent one.
An NCFA base scenario starts with about 25 additional equity crowdfunding issuers a year and a direct retail market of roughly C$25 million. That would still reach only 56% to 61% of activity in Australia after adjusting its market to Canadian scale.
If those raises connect to offering memorandum, accredited investor, community and strategic capital, the scenario supports about 50 additional companies and C$50 million of annual financing. It could support roughly 500 existing jobs, create or retain about 150 direct jobs over two to three years and help around eight companies reach another financing.
Growth VCCI is a serious capital supply intervention. Budget 2025 committed C$1 billion beginning in 2026 to 2027. The current design allocates C$700 million to funds of funds, C$200 million to life sciences investment and C$100 million to emerging managers. Ottawa expects the funds of funds stream to attract three private dollars for each public dollar.
That can strengthen professional fund management and support high growth companies that match a fund's strategy. However, Growth VCCI does not invest directly in companies. Fund managers will still choose businesses that fit their ownership targets, time horizons and return requirements.
Some financeable companies will not fit a VC model. The examples below aren't failed venture deals. They are different financing jobs.
Recent Canadian offerings show what direct investing can deliver and where the current regulatory design constrains it. Leading investment crowdfunding platform FrontFundr reported that:
Edison Motors raised C$1.49 million from 961 investors under NI 45-110, reaching 99% of Canada's C$1.5 million annual issuer ceiling.
Blossom came nearly as close, raising C$1.45 million from 951 investors through the exemption and another C$482,619 from accredited investors.
Gander raised C$1.15 million under NI 45-110 and combined it with other investment to reach just over C$2 million.
These companies attracted hundreds of investors, but the exemption limited how much they could raise through that channel. Companies seeking more capital had to add accredited investors or use another financing route. FrontFundr's 2025 investment crowdfunding activity places these offerings within the wider Canadian market.
Edison also shows that progression can work. After reaching the startup crowdfunding ceiling, the company continued with accredited investors and an offering memorandum. It reported approximately C$14 million raised by May 2026. The next question is how often other companies make that transition, what it costs and where they stall. Canada doesn't publish enough company funding lifecycle data to answer it.
The most transferable U.S. lesson is the public chain from market problem to government response. In 2024, the SEC advisory committee recommended raising the Regulation Crowdfunding threshold that triggers reviewed financial statements from US$124,000 to US$350,000. The proposal hasn't become a final rule, but the recommendation, rationale and response remain visible.
Canada could build the same discipline around four connected reforms.
An annual Small Business Capital Formation Forum could set the priorities. A standing committee could continue the work between forums. Founders, angels, retail investors, venture managers, exempt market dealers, platforms, Indigenous and community finance leaders, regulators and economic development bodies should all have seats. No single group sees the full market.
The output should stay short. Publish each recommendation, the problem it addresses, the body responsible for responding, its current status and the next review date. Keep the archive public. An unresolved proposal shouldn't disappear into a consultation file and return five years later as if the problem were new.
The U.S. lesson is the discipline of keeping unresolved capital problems visible until someone responds. Canada already has venture programs, managed private market proposals, exemptions, portals and dealers. A national forum would bring those routes into one public review and show which companies each one serves, where financing stops and who is responsible for addressing the gap.
Growth VCCI can strengthen institutional venture capital. Managed funds can widen retail access to private markets. Direct investing can reach companies outside fund mandates and let Canadians choose which businesses they back. Canada should evaluate these routes as one capital market and judge them by a practical result: whether more financeable businesses can reach investors on workable terms.
If Canada can publish a billion dollar plan for venture capital, should it also publish the financing barriers founders and investors want fixed, who owns each response and what changed?
Continue into the Canadian funding, investor access and intermediary developments most closely connected to this proposal.
It brings market participants together to develop and rank recommendations on small business capital formation. The SEC publishes the leading recommendations in a report to Congress and includes a response to each one.
The Forum is an annual public process. The Small Business Capital Formation Advisory Committee meets during the year and gives the SEC ongoing advice about rules affecting private companies and smaller public issuers.
FrontFundr reported C$4.79 million under NI 45-110 in 2025 and a 93% market share. That implies a total market of about C$5.15 million, although Canada does not publish a regulator confirmed national total. The estimate equals roughly C$0.12 per person, compared with C$1.08 in Australia and C$0.85 in the United States on the annual measures used in this article.
U.S. industry research estimates that Regulation Crowdfunding has created or supported more than 430,000 direct and indirect jobs since 2016. Canada, the United Kingdom and Australia do not publish directly comparable national job totals in the market sources used here. NCFA's Canadian figures are a planning scenario, not observed results or a forecast.
Under NI 45-110, an eligible company can raise up to C$1.5 million during a 12-month period. An investor can put C$2,500 into one offering, or up to C$10,000 when a registered dealer determines the investment is suitable.
No. It would give regulators and other responsible bodies a recurring public record of market problems and prioritized recommendations. The bodies with legal authority would still decide whether and how to act.
This article is provided for informational purposes and does not constitute investment, financial or legal advice. Programme designs, securities rules and market data may change. Readers should confirm current requirements with the responsible regulator or programme administrator.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |