Karsten Wenzlaff, Advisor
August 26th, 2025
May 15, 2026 | NCFA Insight | Artificial Intelligence And Data

On May 1, 2026, the Academy of Motion Picture Arts and Sciences announced Oscars rules requiring human performed acting and human authored screenplays. The Academy didn’t ban AI tools, but rather protected human creativity at a time when synthetic performers, AI music, and digital personas are iterating live in mainstream culture. The questions are who gets credit, who gives consent, who gets paid, and who takes responsibility when AI is the engine inside the creative process.
In March 2026, AI generated performer Tilly Norwood gave the Oscars restriction a real world stress test by launching a music video called “Take The Lead”. While a human team is behind the creation, the video clearly features a synthetic artist as the visible performer. People designed the character, shaped the concept, guided prompts, edited outputs, and built the persona around the performance.
The production apparently started with a notice stating it was made by “18 real humans” including production designers, costume designers, prompters, editors, and an actor.
Futurism reported that Suno generated the song and Particle6 used performance capture from Eline van der Velden’s acting performance. That means the audio came from an AI music tool, while a real person performed the movements, expressions, or acting choices that helped animate the synthetic Tilly Norwood character on screen.
As synthetic personalities improve, creative credit gets harder to assign. The audience sees the AI performer first while the human labour is more difficult to see. Was the performer the AI character, the actor behind the capture, the director, the prompt team, the studio, the model provider, or the person who shaped the concept?
Futurism called the video “one of the dingiest and depressing things we’ve ever seen.” Viewers also pushed back on the unusual visuals, processed vocals, and pro AI message cutting through the hype.
Bottom line is AI can make more content, faster, but it can’t make audiences care by default.
Creative markets still reward taste, originality, trust, and a sense that real people stand behind the work. As synthetic content spreads, proof of origin, consent, and accountability will likely become part of the product.
Financial services already depends on verified identity, trusted records, permissions, approvals, and auditability. AI raises the stakes because automated agents and AI generated advice and support can blur the line between human and software activity.
A customer may not know whether they’re reading human advice, AI assisted advice, or fully automated output. A compliance team may need to prove who approved a model generated communication. A marketplace may need to verify whether a creator, advisor, vendor, or agent is real. A lender, insurer, or investment platform may need a reliable record of how an AI system influenced a decision.
The Academy’s new rules don’t reject AI. They protect human recognition inside AI assisted creation. Tilly Norwood shows why the boundary won’t stay clean. The battle line is who gets credit, who gets paid, who gives consent, and who is responsible when synthetic work enters the market.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
May 12, 2026 | NCFA Feature | Digital Banking And Credit Union Infrastructure

On May 12 2026, Intellect Design Arena announced that 37 Canadian financial institutions participating in the National Digital Banking Working Group (NDBWG) selected its eMACH.ai Digital Engagement Platform as part of a broader digital banking modernization effort.
This is more than a software contract. It's one of the clearest examples of smaller Canadian financial institutions coordinating technology execution to manage platform risk, modernization costs, and rising digital banking expectations.
Back in October 2024, Canadian credit union infrastructure provider Central 1 announced plans to wind down digital banking over a three to four year transition period. That created immediate pressure for many Canadian credit unions that relied on Central 1’s Forge and MemberDirect platforms.
In March 2025, Central 1 and Intellect finalized an operating partnership that transferred operation of Forge, MemberDirect, public website, and mobile app products to Intellect, along with digital banking engineering and service personnel.
The latest announcement now evolves beyond transition support into long term modernization.
The National Digital Banking Working Group formed after the Central 1 announcement to help participating institutions coordinate vendor evaluation, migration planning, procurement, implementation support, and governance.
According to NDBWG's website, the initiative was designed to help financial institutions navigate a system wide platform transition together instead of individually carrying the cost, risk, and operational complexity of replacing digital banking infrastructure. It's a coordinated modernization program.
NDBWG’s public member page lists 59 participating institutions across British Columbia, Alberta, Saskatchewan, Manitoba, and Ontario. The specific 37 institutions that formally signed with Intellect is likely a subset. Intellect states the participating institutions represent more than $11.7B CAD in combined assets and serve over 262,000 members.
Greg Sol, Board Chair, Credit Unions Future Committee:
“Building on the NDBWG’s rigorous process from vendor evaluation to a fully negotiated agreement, we’re confident that Intellect is the right long-term partner for Canada’s financial institutions.”
Canada’s banking competition debate often focuses on large banks and fintech challengers. Less attention goes to the infrastructure pressure facing smaller regional and community based financial institutions.
Members compare their credit union app with all other digital services they use daily. They expect simple onboarding, quick support, fewer branch visits, and secure ways to handle routine requests. Behind that experience, smaller institutions also face heavier compliance work, sharper fraud risk, and technology costs that keep climbing. For many smaller institutions, maintaining those capabilities independently becomes harder every year.
NDBWG’s model attempts to create digital scale without forcing consolidation. Participating institutions keep their local brands, governance, and member relationships while coordinating around infrastructure, migration planning, and platform execution.
The stronger advantage of a shared approach isn't the software itself, but rather the emerging operating model around it.
Canada already has one of the most concentrated banking systems in the world. If smaller institutions cannot modernize efficiently, the competitive gap widens further. Shared infrastructure and coordinated execution may become one of the few realistic ways for regional financial institutions to stay competitive without dramatically increasing operating costs.
Canada continues preparing for consumer driven banking, stronger fraud controls, and real time payments modernization. Those changes place additional pressure on legacy systems and fragmented operating models.
Steve Kingan, CEO, Frontline Credit Union:
“The NDBWG process gave our credit union the expertise and collective strength to navigate this transition in a way we couldn’t have managed alone.”
For fintech companies, this may also create opportunity. Smaller institutions need practical tools that reduce daily friction, protect members, and improve service without adding complexity. That creates room for focused partners in fraud prevention, digital identity, payments, workflow automation, AI assisted service, and embedded financial services tailored for smaller institutions.
It also explains why more vendors are building Canada ready digital banking platforms for credit unions rather than treating them as small versions of large banks.
Canada’s smaller financial institutions are starting to treat digital infrastructure as a shared strategic capability instead of a fully independent function.
NDBWG represents one of the clearest Canadian examples so far of institutions coordinating modernization to support local financial competition while reducing migration risk and operational cost. If implementation succeeds, it could become a practical model for how smaller financial institutions modernize in other parts of Canada.
Can smaller Canadian financial institutions can build enough shared digital scale to remain competitive while preserving regional and community based banking choice?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
May 8, 2026 | NCFA Insight | Regulation And Policy, Cybersecurity And Fraud, Artificial Intelligence And Data

On May 7, 2026, Apple and Meta warned that Canada’s Bill C-22 could weaken encryption, pushing a long running lawful access debate back into the spotlight. The bill reaches far beyond Silicon Valley politics. It touches the same infrastructure that supports digital banking, fintech apps, cloud platforms, AI systems, wallets, fraud detection, secure communications, and identity verification.
What started as a policing and national security issue increasingly looks like a broader fight over cybersecurity, digital trust, and how governments regulate access to modern technology systems.
Bill C-22 creates a lawful access framework for electronic service providers operating in Canada.
Part 1 updates investigative powers related to subscriber information and transmission data.
Part 2 creates the Supporting Authorized Access to Information Act, which would require certain providers to maintain operational and technical capabilities that allow them to comply with lawful access requests under existing Criminal Code or CSIS Act authorities.
The scope is broad. The bill applies to electronic service providers involved in creating, storing, processing, transmitting, receiving, or making information available electronically. That definition reaches beyond telecom networks and traditional internet providers. Depending on regulations and ministerial orders, the framework could affect cloud providers, messaging platforms, device ecosystems, AI infrastructure, payment systems, digital identity platforms, and fintech companies handling sensitive customer information.
The government argues that Canada’s investigative framework no longer matches modern communications technology. Public Safety Canada says current lawful access rules still reflect a 1995 voice telephony environment, even though investigations now involve encrypted messaging systems, cloud services, internet platforms, and cross border digital infrastructure.
The FBI, RCMP, and other law enforcement agencies have long referred to encrypted communications and inaccessible digital evidence as the “going dark” problem.
Investigators increasingly struggle to access information tied to organized crime, online fraud, ransomware, terrorism, child exploitation, and financial crime because modern services collect less accessible data or use strong encryption that even the provider cannot access directly.
The Canadian Association of Chiefs of Police publicly supported the legislation and argued that police need updated tools to investigate serious crimes in digital environments. Justice Canada also says the bill would allow judges to authorize requests for subscriber information or transmission data from foreign telecommunications or social media providers where there are reasonable grounds to suspect an offence and the information would help the investigation.
The fraud backdrop strengthens the government’s case politically. Competition Bureau Canada reported CAFC data showing Canadians lost more than $704 million to fraud in 2025, while only 5% to 10% of fraud gets reported. Reported losses since 2022 have surpassed $2.4 billion.
Critics argue the proposed solution risks weakening the same security architecture modern digital systems depend on. Reuters reported that Apple warned the bill could allow Canada to “force companies to break encryption by inserting backdoors.”
Meta argued the legislation could force providers to weaken encryption protections or undermine zero knowledge systems designed so providers themselves cannot access customer data.
Public Safety Canada disputes that interpretation. Government officials say the legislation would not require providers to create a “systemic vulnerability” in encryption systems, which is now at the center of the debate.
The problem is technical as much as legal. Security engineers often argue that once a system preserves exceptional access for any party, it creates a potential weak point that can eventually attract criminals and and insider abuse.
For fintechs and financial institutions, it's the same strong encryption that protects account credentials, wallet keys, transaction approvals, secure communications, and increasingly AI workflows that may soon handle sensitive financial tasks autonomously.
The UK offers an important lesson for Canada. Earlier this year, Apple removed Advanced Data Protection for new UK users after government pressure around encrypted cloud access. Apple later stated that UK users would no longer have access to the feature and said, “we have never built a backdoor or master key.”
The UK outcome shows how a lawful access demand can expand into a wider cybersecurity and trade problem. Instead of settling the issue, Apple’s feature rollback intensified scrutiny from privacy advocates, security experts, and U.S. officials concerned about government access to encrypted cloud data.
Canada could face the same kind of fallout if Bill C-22 leaves companies unclear about what they may be forced to build, disclose, weaken, or keep secret under future access orders.
Timing isn't great. Canada is already dealing with pressure around digital sovereignty, platform regulation, AI governance, and trade relations with the United States.
In June 2025, Canada rescinded its Digital Services Tax to restart trade negotiations with the U.S. The CUSMA review is an active pressure point for companies operating across borders through cloud infrastructure, data systems, and digital financial services.
Europe is moving differently. The European Commission imposed the first Digital Markets Act penalties in April 2025, including €500 million against Apple and €200 million against Meta. Meanwhile, the Trump administration has taken a more defensive posture toward American technology firms facing foreign digital regulation, including ordering U.S. diplomats to push back against foreign data sovereignty rules.
That leaves Canada to balance a convergence of pressure around public safety expectations, cybersecurity concerns, platform dependence, trade risk, and digital sovereignty ambitions.
Large platforms will likely absorb the first round of scrutiny. The second order effects may matter more for fintech operators and infrastructure providers.
Fintechs, digital identity companies, crypto wallet providers, cloud based banking platforms, AI finance systems, payment processors, fraud vendors, and regulated financial institutions could all face pressure around compliance architecture, data retention, encryption design, and cross jurisdiction operational requirements.
The cost may not appear immediately through direct enforcement. It may emerge through audits, vendor obligations, insurance requirements, infrastructure redesign, compliance overhead, or changes to how secure systems get built and marketed in Canada.
Encryption is key to financial infrastructure. Customer trust, cybersecurity resilience, fraud prevention, and digital competitiveness now all depend heavily on whether secure systems remain genuinely secure.
Does Canada need to choose between ineffective investigations and weakened encryption for everyone?
A better version of the bill would be more precise. It should clearly say which companies can receive access orders, protect end to end encryption and zero knowledge systems, require independent technical review before any order is approved, and give companies a real way to challenge orders that put security at risk.
The core dispute is not whether courts can authorize lawful investigations. It is whether governments should be able to force companies to preserve technical access inside systems designed specifically to remove that access. That is the fight at the centre of the global encryption debate.
Encryption is foundational infrastructure for finance, AI, communications, identity, and cloud systems. Canada’s challenge is no longer simply how to access digital evidence. It's how to modernize investigations without creating weaker systems that undermine cybersecurity, trust, and long term digital competitiveness.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
May 1, 2026 | NCFA Fintech Market Activity | Risk Compliance And Regtech, Artificial Intelligence And Data

On May 1, 2026, Datavault AI and CyberCatch announce a binding letter of intent for Datavault AI to acquire 100% of CyberCatch in an all stock transaction structured as a court approved plan of arrangement under the Business Corporations Act (British Columbia).
The proposed deal values CyberCatch at about CAD $136.8 million (CAD $5.11 per share). CyberCatch shareholders would hold about 7.52% of the combined company, with Datavault AI shareholders holding about 92.48% on a non fully diluted basis.
CyberCatch CYBE is listed on the TSX Venture Exchange and OTCQB US Venture Market, focuses on continuous compliance and AI driven cyber risk testing. Its platform uses generative AI to assess whether controls are in place, then uses agentic AI to simulate attack scenarios and produce a Cyber Breach Score. The model is built around continuous validation rather than periodic audit cycles.
Timing aligns with rising demand for continuous security assurance. The release cites Gartner estimates that global information security spending will reach $240 billion in 2026, while AI driven security could grow to $160 billion by 2029 (up from $49 billion 2025). IBM’s 2025 Cost of a Data Breach report places the average U.S. breach at $10.22 million and the global average at $4.44 million.
Regulatory pressure is picking up. The U.S. Department of Defense started rolling out its CMMC program on Nov 10, 2025, and stricter certification requirements are expected to expand in 2026 across about 220,000 contractors and suppliers. CyberCatch aligns its platform with widely used standards such as CMMC 2.0, NIST, ISO 27001, HIPAA, and PCI.
There’s also a growing focus on future security risks. As computing power increases, current encryption methods may become easier to break. CyberCatch is working on quantum resistant encryption, and signs like Google’s 2029 timeline for upgrading its systems show that companies are starting to prepare now.
Nathaniel T. Bradley, CEO, Datavault AI:
“Cybersecurity is no longer a separate stack from data and AI - it is the precondition for both. CyberCatch's continuous compliance platform is expected to provide another strategic advantage by adding to DataValue®, DataScore®, and the IDE® a real-time risk and compliance signal at every node of our quantum-secured edge fleet, from federal contractors to enterprise data customers.”
For Datavault AI, the transaction adds a compliance layer to its broader data, edge computing, and tokenization infrastructure. The company positions CyberCatch as a way to deliver real time assurance across regulated environments, including fintech, healthcare, energy, and defence.
CyberCatch brings a Canadian public market cybersecurity and regtech platform into a U.S. AI infrastructure strategy.
The transaction is subject to a definitive agreement, due diligence, board approvals, CyberCatch shareholder approval, British Columbia court approval, Nasdaq approval, TSX Venture Exchange approval, and other customary closing conditions. The parties have agreed to a 45 day exclusivity period.
Will continuous, AI driven compliance become a required layer for regulated industries, or will firms continue relying on periodic audits that do not reflect real time risk?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |