Karsten Wenzlaff, Advisor
August 26th, 2025
June 16, 2025 | NCFA Resource | Risk Compliance And Regtech, Artificial Intelligence And Data, Regulation And Policy

On May 25, 2026, the International Organization of Securities Commissions (IOSCO) published its Supervisory Toolkit for Artificial Intelligence Use in Capital Markets. The report provides practical tools for regulators supervising AI systems used by market participants, exchanges, investment firms, and capital market infrastructure providers.
The toolkit arrives as AI goes beyond experimentation and into production environments across trading, surveillance, compliance, onboarding, fraud detection, customer service, research, risk management, and operational workflows. IOSCO focuses on the supervisory questions regulators need to ask rather than promoting a specific technology approach.
Stakeholder Input Opportunity: IOSCO is also seeking feedback related to the toolkit and AI supervision in capital markets. Interested regulators, market participants, technology providers, academics, and industry stakeholders can review the report and submit responses to IOSCO by this short survey by June 26, 2026.
The report organizes supervision around seven areas. These include governance and accountability, model development and testing, data quality and management, monitoring and controls, outsourcing and third party providers, market conduct risks, and operational resilience.
Rather than prescribing rules, IOSCO provides supervisory questions, review approaches, and practical considerations that regulators can use when assessing AI systems operating in capital markets. The toolkit is designed to support risk based supervision while remaining flexible as technologies evolve.
The report also recognizes that AI risks often emerge from combinations of factors rather than a single model failure. Poor quality data, weak governance, limited oversight, inadequate testing, vendor dependencies, and insufficient monitoring can interact in ways that create market, operational, or investor protection concerns.
Many financial institutions are already deploying AI in regulated environments. The challenge is no longer whether AI will be used. The challenge is whether firms can demonstrate appropriate governance, explainability, oversight, and accountability once those systems affect clients, markets, or investment decisions.
For fintech operators, the toolkit offers a useful preview of the questions regulators may increasingly ask during examinations, supervisory reviews, audits, and risk assessments. Firms that build governance and controls into deployment processes early may face fewer compliance and operational challenges as expectations mature.
This resource is useful for securities regulators, exchanges, investment dealers, fintech founders, regtech providers, compliance teams, AI governance specialists, risk managers, and market infrastructure operators.
It is especially relevant for organizations using AI in trading, surveillance, onboarding, fraud detection, compliance monitoring, client communications, investment research, portfolio management, or operational decision making.
The strength of the toolkit is its practical orientation. It extends beyond high level AI principles and focuses on supervision, controls, accountability, and operational implementation. The framework can be applied across a wide range of AI use cases and organizational structures.
It also provides a common language that regulators and industry participants can use when discussing AI oversight. That consistency becomes increasingly important as firms operate across multiple jurisdictions with different regulatory approaches.
The toolkit does not create binding rules or regulatory obligations. IOSCO's role is to provide guidance and supervisory tools that member jurisdictions can adapt to their own legal and regulatory frameworks.
IOSCO Supervisory Toolkit For AI Use In Capital Markets (primary resource)
IOSCO Media Release (official announcement)
AI Agents Enter Governed Financial Workflows (AI governance and oversight)
Customer Due Diligence Controls For Fintechs (controls, monitoring, and accountability)
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Jun 11, 2026

Pain and suffering is one of the most significant parts of a slip and fall claim. Unlike medical bills, pain and suffering have no receipts. What it's worth depends on how serious your injury is and how it has changed your life. Salamati Law Personal Injury Lawyer knows how to put real numbers behind what you've been through. A strong courtroom record means more than experience. It means better outcomes when pain and suffering are at stake. Knowing that connection helps you go into your claim with a clearer picture of what to expect.
The first thing courts and insurance adjusters look at is how bad the injury actually was. A minor bruise and a spinal fracture will never produce the same damages award. The worse the injury, the bigger the impact on your daily life and the stronger your case. Medical records, imaging, and doctor testimony prove the severity. An attorney who knows how pain and suffering are valued can make a real difference in what you walk away with.
The longer you live with pain and limitations, the more weight your case carries. An injury healing in two weeks carries far less weight than one lasting two years. If your injury is chronic or permanent, California law recognizes that as one of the most serious losses you can suffer. Keeping a treatment journal and staying consistent with your care shows exactly how long you've been suffering. Details about how the injury affects your sleep, your work, and your relationships carry real weight. A clear record from the day of the injury forward makes your claim significantly stronger.
When an injury stops you from doing things you used to do, that loss counts in your case. Courts recognize that losing mobility, missing work, or struggling to care for your kids is real damage. Medical experts can explain exactly how your injury limits what you can physically do. Your own words and your family's accounts put a human face on those limitations. The more specific and concrete those details are, the harder it is for anyone to dispute what you're owed.
A serious fall doesn't just hurt your body. Many people are left dealing with anxiety, depression, and trauma long after the physical wounds heal. California law recognizes those conditions as real losses you can be compensated for. But you need documented treatment from a mental health professional to back them up. Insurers will push back hard on psychological claims without formal clinical records to support them. Connecting the fall, the injury, and the mental health impact clearly and thoroughly can add significant value to your case.
California has no fixed formula to calculate pain and suffering in personal injury cases. Ultimately, courts and juries decide what your pain and suffering is worth based on what you can show them. The two most common methods for calculating pain and suffering in negotiations are the multiplier method and the per diem method. Multiplier calculations apply a set number to economic damages to estimate intangible harm. Per diem calculations assign a daily value to suffering and multiply it by duration. An experienced attorney can advise which approach best fits the facts of your case.
Severity drives everything. It determines your demand, shapes negotiations, and influences what a jury decides. Document all of it. The physical damage, what you can't do anymore, and the psychological weight of it. California law gives injured people a real path to meaningful compensation when the evidence supports it. A good attorney finds the parts of your suffering you didn't think to document and makes them count. This happened because someone else was careless. You shouldn't be the one absorbing the cost of that. Taking your claim seriously from day one is what gives you the best chance at a fair result.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
June 10, 2026 | NCFA Insight | Regulation And Policy, Capital Markets And Market Infrastructure

On June 10, 2026, the CFTC opened public consultation on proposed prediction market rules and the related 267-page pre-publication rule document. The proposal would create a formal review process for event contracts that touch sensitive areas such as gaming, war, terrorism, assassination, or unlawful activity.
The market is now large enough to force a real line-drawing exercise. The CFTC says total trading volume across registered prediction markets exceeded $25 billion in 2025. That remains small beside the roughly $31 trillion notional value of the broader futures market the agency regulates, but it is no longer a niche category.
The proposal targets event contracts covered by Section 5c(c)(5)(C) of the Commodity Exchange Act. The CFTC wants to amend Regulation 40.11, add Appendix F to part 40, define when a contract “involves” a listed activity, define “gaming,” and apply public interest factors to each contract under review.
Currently, a registered exchange can self-certify a contract, and contracts may begin trading quickly. The proposed framework gives the CFTC a 90-day review period for contracts that may involve one of the listed activities. The agency can request that trading pause during review, but the proposal says prediction markets are not required to follow that request. Some contracts could trade during review and later be blocked or delisted if the CFTC finds them contrary to the public interest.
The public interest test is practical. The CFTC would look at price discovery, information value, market integrity, and whether the platform can supervise the contract. That puts contract design, settlement data, surveillance, and trader controls at the centre of the review.
Sports are a key test case. The proposal treats contracts based on broad, objective sports outcomes more favourably, including final scores, point differentials, win-loss results, tournament advancement, team or individual statistics, and season-long performance metrics. The CFTC says these contracts can create useful price information when they use objective settlement criteria and are supported by suitable oversight and coordination with sports integrity bodies.
The CFTC is stricter around contracts tied to player injuries, officiating decisions, youth sports, cheating incentives, and misconduct. Injury contracts can create harmful incentives and expose medical information. Officiating contracts can put pressure on a small number of identifiable decision makers. Youth sports markets raise participant protection concerns.
DraftKings highlights why this rulemaking is needed commercially. Barron’s reports that annualized consumer trading volume on DraftKings Predictions reached $1.3 billion, up 24% from April 2026. Annualized total trading volume reached $3.1 billion, up 34%. Note, the numbers are early and based on company data.
DraftKings brings sports users, mobile distribution, pricing, promotions, and live event engagement. Kalshi and Polymarket bring event contracts, exchange style trading, collateral, liquidity, and surveillance. The CFTC proposal now pulls those models into the same regulatory conversation.
The user experience may look similar on a phone, but the rulebooks are different. Sportsbooks operate under gaming law. Prediction markets argue they are federally regulated event contract markets that support price discovery and information aggregation. The CFTC proposal tests where that argument holds, especially when sports contracts that are towing the line of integrity.
NCFA recently looked at trust questions around Polymarket influencer payments, including disclosure, paid promotion, and market credibility after a market goes live. The CFTC proposal moves the issue upstream. It asks which markets should be allowed to list in the first place.
Canada should watch closely. DraftKings already operates in Ontario’s regulated iGaming market, while prediction markets continue to test the line between financial contracts, gaming products, and information markets. The U.S. approach won't cleanly transfer into Canada, but it gives Canadian regulators, exchanges, fintechs, and other stakeholders an early view of the policy questions surrounding the table..
Will sports prediction markets become regulated financial products, sportsbook extensions, or a new category that forces regulators to redraw the line between trading, gaming, and market information?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Jun 9, 2026

Going public puts every control your fintech owns or outsources under a microscope. Auditors, regulators, and future shareholders want hard evidence that third-party weak spots cannot derail your debut.
Roughly 30% of breaches trace back to external suppliers, and each incident costs an average $4.44 million, according to IBM's 2024 Cost of a Data Breach Report. Advisers preparing S-1 filings increasingly want a repeatable way to assess outside cyber risk before the SEC asks, and investors read disciplined third-party oversight as a proxy for operational maturity.
Here is the catch: your SOC 2 program alone will not clear the public-company bar. SOC 2 demonstrates protection of customer data, while SOX 404 focuses on financial-reporting integrity. A purpose-built vendor-risk platform bridges that gap by connecting vendor security evidence to the controls auditors expect in an IPO cycle. We ranked five platforms on the criteria that matter most for IPO prep: compliance fit, automation depth, auditor acceptance, and cost-to-value.
We started with fifteen tools from analyst waves, forums, and twenty competitor write-ups, then removed anything lacking a purpose-built vendor-risk module or fintech case study, leaving five contenders. We scored each on a 100-point scale across four questions:
Two CISOs who took fintechs to market last year reviewed the weighting, confirming it reflects where auditors press hardest.

Vanta folds vendor oversight into the same dashboard you use for SOC 2, helping teams remediate risk up to 45% faster. VRM, compliance automation, Trust Center, and SOX ITGC live in one system with shared evidence and cross-framework mapping.
Verdict: best fit if your IPO plan needs one platform to run SOC 2, stand up SOX ITGC, and operationalize vendor oversight. If you need managed analyst services or board-ready vendor portfolio reporting, compare TPRM-specialized options.

Optro rebranded from AuditBoard in March 2026. It keeps the same product family public-company SOX teams know: SOXHUB (SOX program management), CrossComply (multi-framework compliance), and a connected TPRM module. More than half of the Fortune 500 use it, and it is one of the most common SOX systems Big Four auditors are comfortable testing.
Verdict: choose Optro if full SOX 404 depth (ITGC plus financial process controls) and audit-firm fluency top your list. For SOC 2 day-to-day, a Trust Center, and AI-compressed vendor reviews, you will likely pair it with another platform.

OneTrust grew from privacy management into a broad GRC suite with a substantive third-party risk module, serving 14,000+ customers across regulated industries. It fits when vendor oversight has to live next to privacy, ethics, and ESG in one control fabric.
Verdict: right when vendor risk must sit alongside privacy, ethics, and ESG in one enterprise fabric and you can absorb a longer rollout. To consolidate SOC 2, SOX ITGC, and AI-assisted reviews into one fast-moving platform, OneTrust typically needs pairing.

Prevalent is a pure-play TPRM platform with more than two decades of specialization, acquired by Mitratech in October 2024 and rated a Strong Performer in Forrester's Third-Party Risk Management Wave (Q1 2026). It is the heavyweight option when vendor risk itself is the program.
Verdict: choose Prevalent for bank-style TPRM depth, broad regulatory mapping, and multi-domain continuous monitoring. To collapse SOC 2, SOX ITGC, and vendor oversight into one platform, expect to add complementary tools.

Venminder is a TPRM platform for regulated financial-services teams that want to outsource a share of vendor due diligence. It pairs software with managed services where certified analysts review vendor materials and deliver risk-rated outputs. Venminder was acquired by Ncontracts in September 2024 (Hg Capital-backed); it has 1,200+ customers, and the combined entity serves 5,000+.
Verdict: strong when capacity and expertise are the constraint and you want platform-plus-analysts diligence with contract oversight. To consolidate SOC 2 evidence, SOX ITGC, and VRM into one system, Venminder adds tool sprawl rather than reducing it.
In most fintechs, SOC 2 lives with Security and SOX 404 with Finance, and your vendors sit in the overlap. Treat them as two programs and you get two inventories and two sets of audit questions that never reconcile. Build one vendor register that serves both audits instead.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
June 8, 2026 | NCFA Market Activity | Artificial Intelligence And Data, Risk Compliance And Regtech

On June 8, 2026, Ottawa based MindBridge expands its AI audit and assurance platform to help audit teams review larger transaction populations and assess risk faster. The update adds full population analysis, subledger analysis, a Monetary Flow Dashboard, transaction level risk assessment, duplicate transaction controls, and large file processing.
MindBridge says KPMG deploys its platform through a global audit platform used in more than 60 countries. The company also points to recent partnerships with BDO and Buzzacott.
Sarah McGinnity, General Manager, Audit & Assurance Solutions at MindBridge:
“Audit and assurance teams are being asked to oversee larger transaction populations, more complex systems, and increasingly automated financial processes without adding proportional time or resources.”
The most important part of the announcement is the focus on full population analysis.
Audit teams have traditionally relied on sampling. AI driven software now makes it possible to review entire transaction populations and identify unusual activity across much larger data sets. That can help auditors spend less time searching for issues and more time investigating the transactions that matter.
MindBridge is positioning its platform around that shift. The latest release gives users more visibility into transaction flows, subledger activity, and risk indicators across financial records.
Many AI products compete on productivity. MindBridge competes on audit quality, risk assessment, and financial controls.
It alters the buying decision. Audit firms, finance teams, and regulated organizations already need oversight, documentation, and evidence. They aren't looking for experimentation. They're looking for better ways to review growing volumes of financial data.
The trend extends beyond audit. Financial institutions are adopting AI in compliance, fraud detection, transaction monitoring, and operational risk. As NCFA noted in its coverage of regulated AI controls and governance, buyers increasingly want systems that support human judgment and provide a clear record of how decisions are made.
If audit software can test full transaction populations instead of samples, the value changes from finding anomalies after the fact to proving where financial risk may occur before judgment calls are made. That's where AI audit tools become useful to CFOs, auditors, and regulators: not as automation, but as evidence infrastructure.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |