Karsten Wenzlaff, Advisor
August 26th, 2025
Aug 17, 2026

When the first DORA Register of Information submissions arrived in April 2025, European supervisors kept hitting the same wall. Financial entities could not produce an accurate, current list of their own ICT assets. The data sat in spreadsheets, in a departed engineer's notes, and across two or three tools that disagreed with each other. The EBA flagged widespread gaps and sent institutions back to resubmit, in several cases more than once.
None of that was a security failure in the usual sense. The controls were often in place. What was missing sat one level lower: a reliable inventory of what the firm actually runs. For a fintech, that absence is not a documentation nuisance. Operational resilience – keeping payments, ledgers, and customer access working through a disruption – rests on knowing what you run, where it runs, and what stops when a component fails. You cannot map a dependency you never recorded, and you cannot restore a service whose parts you cannot name.
DORA (Regulation (EU) 2022/2554), in force since 17 January 2025, states the requirement plainly. Article 8 obliges financial entities to identify and classify all ICT assets and information assets, document the links and interdependencies between them, and keep those inventories current – refreshed after every major change, with a dedicated risk assessment of legacy systems at least once a year. DORA requires EU member states to lay down effective, proportionate and dissuasive penalties for financial entities. The sanctions that apply depend on national law and on the circumstances of the breach.
The UK sets a parallel bar. Under FCA policy statement PS21/3 and PRA supervisory statement SS1/21, the transitional implementation period ended on 31 March 2025. Firms must identify their important business services, set impact tolerances, and map the resources each service depends on, including technology, data, facilities, and people. That mapping collapses without an accurate asset layer beneath it. In the US, the 2020 interagency paper on operational resilience points the same way, tying resilience to a clear view of critical systems and their dependencies.
Enforcement is tightening rather than loosening. Germany's BaFin declared the DORA “transformation year” over at the end of 2025, a signal that supervisors now expect working inventories, not remediation plans. Three regulators, one shared premise: transparency of IT assets is the precondition for everything built on top of it.

Figure 1
Figure 1. IT asset transparency is the base layer every resilience process depends on.
Transparency is not a spreadsheet exported once a quarter. It is three capabilities working together, and the weakest one sets the ceiling.
Automated hardware and software auditing finds devices, virtual machines, cloud instances, and installed packages without waiting for anyone to complete a form. Fintechs churn infrastructure quickly, so a hand-maintained list is stale within weeks. Agent-based and agent-less scanning each catch what the other misses – agents report from laptops that leave the network, while agent-less scans reach devices where you cannot install software.
A configuration management database (CMDB) records that a specific payment API runs on these servers, reads from that database cluster, and backs a named customer-facing service. During an incident, that relationship graph gives you blast radius in seconds instead of a war-room reconstruction. A flat asset list cannot answer the question that matters: if this fails, what else goes with it?
Every asset needs a criticality rating, a named owner, a lifecycle state, and a link to the business function it supports. That is close to a word-for-word restatement of what DORA Article 8 asks a financial entity to hold, which is why an inventory missing those fields tends to fail at submission time rather than during an outage.
Table 1. What each resilience obligation actually needs from the asset layer.
| Resilience obligation | Asset data it requires | Consequence of a gap |
| DORA Article 8 inventory and classification | Full list of hardware, software, and cloud services with a criticality rating and named owner | Incomplete Register of Information; repeated resubmission cycles |
| Dependency mapping (DORA Art. 8; UK important-business-service mapping) | CMDB relationships tying assets to services, users, and third parties | Cannot scope incident impact or evidence a recovery path |
| Incident response and recovery | Live location, configuration, and ownership for every asset | Longer time-to-restore; recovery steps improvised during the outage |
| Yearly legacy-system risk review | Lifecycle state, end-of-life flags, and patch status | End-of-life systems stay live and unassessed |
| Third-party and concentration risk | Register of vendor-linked assets and their interconnections | Blind to a supplier dependency during a supplier outage |
The failure modes are predictable. Cloud and SaaS growth push assets outside the corporate network, where an on-network scanner never sees them. Shadow IT – a product team standing up a service on a corporate card – never reaches the register at all. Remote and field laptops drop off the VPN and stop reporting, so their patch state quietly goes unknown. And the most common failure is the humblest one: the inventory lives in spreadsheets and email threads that no discovery tool feeds, so it drifts out of date the moment it is saved.
The dataset behind Alloy Software's recent deals shows how entrenched that last pattern is. Across more than 40 closed-won accounts between 2024 and 2026, spreadsheets, email, and homegrown databases were the single most common system teams were replacing – ahead of any named commercial tool.

Figure 2
Figure 2. Prior systems replaced across 40+ Alloy Software closed-won deals (2024–2026).
A workable sequence follows the order of dependency, not the order of visible output:
The order matters. Teams that start with dashboards before discovery end up with attractive reports built on data nobody trusts. Discovery first, relationships second, reporting last.
For a regulated fintech, three questions filter the market quickly. Does discovery reach cloud and off-network devices? Does the CMDB model relationships rather than store a flat list? Can the data stay on-premises where a security policy or air-gapped requirement demands it? Cost matters, but it rarely decides the outcome on its own.
Table 2. Decision view across five ICT asset and service-management platforms.
| Platform | Discovery reach | CMDB and relationships | Hosting | Indicative cost / fit |
| Alloy Navigator | Agent and agent-less network inventory; off-network audit for field laptops | Integrated CMDB; tickets linked to assets, users, and contracts | On-prem or cloud | ~$1k–$25k/yr; 2–35 IT staff |
| ServiceNow | Agent-less discovery via MID server; broad cloud coverage | Deep, highly configurable CMDB | Cloud-first; limited on-prem | Six-figure programmes; 100+ IT staff |
| Lansweeper | Agent and agent-less scanning; strong network coverage | Asset-centric; lighter service relationships | Cloud or on-prem | Per-asset pricing that has risen sharply; small–mid teams |
| ManageEngine ServiceDesk Plus | Agent and agent-less; discovery add-on | CMDB in higher tiers | On-prem or cloud | Low–mid, per-technician/node; small–mid teams |
| Freshservice | Discovery agent plus probe | Cloud-native CMDB | Cloud only | Per-agent SaaS; no on-prem option |
Costs reflect market positioning, not quotes; verify against current vendor pricing before shortlisting.
Where a firm has outgrown spreadsheets but cannot absorb a six-figure ServiceNow programme, mid-market platforms cover the ground. Alloy Navigator sits in that band: agent and agent-less network inventory, an integrated CMDB that links tickets to assets, users, and contracts, and a choice of on-premises or cloud hosting for healthcare, public-sector, and finance environments with strict data-residency rules. Deal data puts its annual cost between roughly $1,000 for small teams and $25,000 for larger estates, which is why it usually appears against Lansweeper and ManageEngine rather than enterprise suites.
An accurate asset register earns its keep only when it feeds the processes around it. Change management is the clearest example: when every change references the assets and services it touches, the CMDB stays current as a by-product of daily work instead of decaying between audits. Incident response reads the same relationship graph to scope impact, and third-party risk mapping – a specific DORA obligation – draws on the register of vendor-linked assets. Teams that want to go deeper on tying assets to change and incident workflows tend to find that the relationship model, not the raw asset count, is where the resilience value sits.
If a fintech can answer three questions on demand – what do we run, what depends on it, and who owns it – most of DORA Article 8 and the UK mapping requirement is already within reach. If it cannot, no volume of policy documentation closes the gap, because the gap is data, not paperwork. Point automated discovery at the whole estate, including cloud and remote endpoints, and measure how far the result differs from the current spreadsheet. That delta is the honest size of the resilience problem.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 17, 2026 | NCFA Market Activity | Capital Markets And Market Infrastructure, Wealth Investing And Trading, Competition And Market Structure

National Bank is modernizing its fund and ETF accounting infrastructure with Multifonds, bringing work handled across separate systems onto one platform.
On August 11, 2026, Multifonds announced that National Bank of Canada had selected Multifonds for fund and ETF accounting after an evaluation and proof of concept.
The project gives National Bank one accounting environment for more of the valuation, NAV and ETF administration work it performs for firms that offer investment funds and ETFs.
National Bank provides fund and ETF administration services that include fund accounting, transfer agency, ETF basket creation, financial statements and tax support.
Multifonds Global Accounting brings fund and ETF accounting into one environment. It processes data in real time and uses exception based workflows so operations teams can focus on records that need review.
The platform includes more than 350 configurable controls across NAV, valuation and distribution work. Multifonds says it supports more than 40,000 funds across 35+ jurisdictions.
National Bank plans to replace siloed systems with the platform. Multifonds expects the change to reduce manual steps, improve oversight and support faster product onboarding.
While those are the expected benefits, the results will depend on how the platform performs once National Bank moves more accounting work into production.
ETF administration involves more than calculating a fund's value. National Bank also supports transfer agency, market makers and the creation of ETF baskets.
Those processes depend on accounting records and outside data staying aligned. Multifonds connects ETF accounting with more automated data exchange, giving National Bank a common system for more of that work.
Canada's ETF market has grown sharply. Canadian ETFs attracted a record C$122 billion in net inflows in 2025, up 62% from the previous record, and Canadian ETF assets reached about C$790.5 billion by the end of March 2026.
Canada's ETF market has grown sharply. Canadian ETFs attracted a record C$122 billion in net inflows in 2025, while industry assets approached C$800 billion in early 2026.
The market is also under closer regulatory review. The CSA consultation on Canadian ETF rules examines areas including unit creation and redemption, ETF trading, NAV alignment and basket practices.
That growth means more products, valuations, baskets, records and exceptions for administrators to process. Automation can reduce repetitive work, but controls still have to catch problems before incorrect data reaches fund managers, trading partners or investors.
The same operating challenge appears in tokenized fund operations. New ways to issue or transfer fund interests still depend on reliable pricing, accounting, investor records and administration.
National Bank is investing in a part of the market where other large Canadian asset servicers are also spending on technology.
In April, CIBC Mellon expanded its Appian automation program. Planned improvements include a more digital ETF service and fund administration workflows designed to reduce manual work and improve data visibility. CIBC Mellon reported more than C$3.4 trillion in assets under administration as of March 31, 2026.
RBC Investor Services reported C$3.1 trillion in assets under administration in the second quarter. Its asset servicing technology investments include ETF modernization, automated reconciliations and predictive reporting.
These investments highlight competitive pressure. Fund administrators need to support more products and data without adding manual work at the same rate.
Technology can influence how quickly an administrator launches products, handles exceptions and gives clients access to accurate information.
National Bank is also using specialist technology in other operating areas. Its Sardine fraud controls deployment focuses on fraud and financial crime rather than fund administration, but both projects use specialist technology for high-volume financial operations.
Moving more fund and ETF accounting onto one platform can simplify operations, but it also increases dependence on that platform.
National Bank will need strong data quality, integrations, controls and recovery processes as the implementation expands. If a shared accounting system fails, the adverse impacts can amplify and reach more funds and ETF workflows at once.
As Canadian asset servicers automate more fund and ETF administration, will technology become a bigger factor in which providers win new business?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 17, 2026 | NCFA Market Activity | Lending Consumer Credit And BNPL, Digital Assets, Competition And Market Structure

On August 13, 2026, Montreal-based Shakepay launched its Shakepay bitcoin-backed line of credit, BLOC, for eligible Canadian customers. Borrowers can access up to C$50,000, with rates starting at 9.5% APR, using eligible bitcoin held with Shakepay as collateral.
BLOC is offered by Shakepay Credit Inc., an affiliated entity that received securities law exemptive relief to offer bitcoin-backed credit to eligible customers.
Shakepay retains more of the lending operation inside affiliated entities rather than relying on an outside lender to run the credit product.
That sets up a useful comparison with the APX and Netcoins embedded lending model.
BLOC is a revolving line of credit available within Shakepay. Eligible customers can draw against available credit, monitor balances and loan-to-value, make payments and adjust eligible collateral subject to their agreement.
Bitcoin volatility is still paramount. If collateral values fall, borrowers may have to add bitcoin or repay part of the balance. Some or all of the collateral can ultimately be liquidated.
The CSA list of authorized crypto platforms includes Shakepay Inc. as a crypto asset trading platform and Shakepay Credit Inc. separately as a crypto-backed lending platform.
Customers use BLOC through Shakepay, but the loan itself is provided by a separate Shakepay company, Shakepay Credit Inc.
BLOC follows several additions around the same customer relationship.
In July, Shakepay became a direct Interac e-Transfer participant. Customers already had access to e-Transfers, but direct participation gives Shakepay more control over how the service connects to its platform. NCFA's Shakepay Company Intelligence Snapshot tracks its expansion from bitcoin trading into payments, cards and business accounts.
On August 11, Shakepay launched Shakepay savings for cash and bitcoin. Two days later, BLOC added secured credit.
The legal entities and protections differ. Shakepay Inc. operates the regulated crypto platform. Cash savings are offered by Shakepay Financial Inc. Bitcoin savings remain with Shakepay Inc. BLOC is offered by Shakepay Credit Inc.
For customers, those expanding services are part of a common Shakepay experience.
Shakepay says more than 1.5 million Canadians have used the platform. Adding payments, savings and credit gives those customers more reasons to use Shakepay between crypto trades.
Competition therefore extends beyond trading fees and asset listings. Crypto platforms can also compete for payments, balances and borrowing.
Shakepay Credit and APX show two ways Canadian crypto platforms can add secured lending.
Shakepay and Netcoins take different approaches. Shakepay uses a separate company within its own group to provide the loan. Netcoins keeps the customer relationship, while APX handles the lending behind the scenes.
For customers, the practical questions are simpler. Who is actually lending the money? Where is the bitcoin held? What happens if its value falls? How much does the loan cost?
For the platforms, the choice comes down to control. Shakepay keeps more of the lending business inside its own group. Netcoins relies on a specialist provider.
Will Canada's larger crypto platforms keep more regulated financial functions inside affiliated entities, or will specialist providers become the infrastructure behind multiple consumer brands?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
August 14, 2026 | NCFA Companies On The Move | Artificial Intelligence And Data, Risk Compliance And Regtech, Banking And Credit

Fisent Technologies is a Toronto enterprise AI company founded in 2021 by Adrian Murray. Its BizAI platform reads and interprets unstructured content such as applications, claims, statements, contracts and correspondence, then turns the results into data and actions that existing business workflows can use.
The company now has enough operating evidence to look beyond the technology itself. Fisent says BizAI has more than 20 enterprise use cases in production, with customers across banking, lending, wealth management, insurance and other industries. Public examples include Aruba Bank through Orco Group, AEGIS London, CMG Financial and Westinghouse.
On August 11, Fisent closed a US$4.3 million venture round led by FINTOP, bringing disclosed funding to US$6.3 million. The financing arrives after Fisent reported 206% revenue growth in 2025, 173% net revenue retention and a third consecutive year without customer churn. Those percentages are company-reported, and Fisent does not disclose the revenue amount or total customer count.
Banks, insurers and other large companies still receive important information in documents, emails, forms, scans and files that don't arrive in one clean structure. Employees have to read the content, decide what it means, enter the relevant information and route the work. Fisent is selling automation into that gap.
In 2024, Orco Group used BizAI at Aruba Bank to process documents following its acquisition of CIBC FirstCaribbean operations. The company case study reports a 90% decrease in errors, more than 70% faster processing and capacity for as many as 10,000 unstructured documents a day. Those are customer case-study results, not audited benchmarks.
In mortgage lending, CMG Financial selected BizAI for underwriting and processing workflows. AEGIS London has deployed it for insurance endorsement processing. Outside financial services, Pega independently featured Westinghouse and Fisent at PegaWorld 2026, describing a live workflow that combines Fisent's AI with Pega automation to improve parts fulfillment and route exceptions to people.
Those examples give Fisent something many enterprise AI companies still lack, which is proof that customers are putting the software into operating workflows. That is especially useful in regulated finance, where AI adoption depends on controls, data quality and third party oversight as much as model capability.
Adrian Murray, Founder and CEO, Fisent:
“Enterprises are moving beyond AI experimentation and choosing the capabilities they can trust to operate at scale.”
BizAI can classify content, split complex files, extract information, verify it against defined criteria, analyze context and standardize tables. Fisent lets customers choose different models and hosting options, then uses its GenAI Efficacy Framework to compare model configurations on measures such as accuracy, speed, consistency and cost.
That model flexibility is important when a bank or insurer doesn't want one provider deciding where its data is processed or which model supports every use case. Fisent says its default architecture retains no customer content and does not use customer data to train models. The company completed a SOC 2 Type II examination in 2025 and says its controls were expanded during that year's review.
BizAI Studio launched in May 2026, giving business and automation teams a visual environment to design, test, deploy and maintain workflows with review gates, versioning and traceability. That changes where Fisent competes. A customer can build directly with a model provider, use AI functions inside a large workflow platform, buy a document-processing product or use Fisent as the content intelligence layer between models and existing systems. Fisent has to keep earning that position as larger platforms add their own AI capabilities.
Pega is particularly important because it is both an investor and a workflow partner. That relationship gives Fisent a route into enterprise processes already running on Pega, while also making the surrounding platform ecosystem part of its distribution strategy. Governed financial AI increasingly depends on exactly these workflow controls: permissions, evidence, review, escalation and records of what the system did.
Pricing isn't public. Fisent reports strong growth in licensing revenue and enterprise expansion, but contract size, recurring revenue mix and implementation economics remain private.
Fisent's bottleneck is changing. It already has product and deployment evidence. The next job is selling and implementing it repeatedly across more large enterprises.
The US$4.3 million round is Fisent's first priced venture financing and follows US$2 million of earlier disclosed investment from investors including Pega, Cloudberry Pioneer Investments and Sand Dollar Capital. Pega participated again in the FINTOP round, and FINTOP Partner John Philpott is joining Fisent's board.
FINTOP says its strategic investor network includes about 100 banks with US$1.3 trillion in combined assets, along with other financial services companies. That network doesn't automatically give Fisent 100 prospects, pilots or customers. It does put an investor with deep financial institution relationships beside a company trying to sell regulated enterprise AI.
Fisent says the new capital will expand sales, customer enablement, deployment engineering and product development while widening distribution through workflow and technology partners. Those uses fit the current stage. Enterprise AI can fail commercially even when the model works if implementation takes too much specialist effort or every customer becomes a custom project.
Fisent reports impressive growth in 2025 with 206% total revenue growth, 365% licensing revenue growth and 173% net revenue retention. It says customers now run more than three BizAI implementations on average, 90% added at least one production use case during 2025 and none has churned in three years.
Those numbers reflect expansion inside existing accounts. They don't tell us how large Fisent is in absolute terms. Revenue, profitability, valuation, contract values and total customer count are not public. Its first Fortune 50 customer in 2026 is also a company-reported milestone and the customer has not been named.
The evidence puts Fisent beyond initial validation without placing it in the same scale category as established enterprise platforms. Its current position is best described as Accelerate / Commercialize: real production use, repeat deployments and rising revenue, with absolute scale still private.
The FINTOP round raises the commercial bar. More named financial institution deployments, a larger base of repeatable implementations and evidence that BizAI Studio reduces deployment work would show that Fisent can grow without services effort rising at the same pace as software adoption.
On the NCFA Financial Innovation Map, Fisent sits where enterprise AI, workflow automation, financial operations and regtech meet.
The Company Intelligence Snapshot below follows the evidence that brings Fisent from formation into its current commercialization stage.
Adrian Murray founded Fisent in Toronto in 2021 after more than a decade working in financial services technology and operations, including core banking, digital banking, compliance, regtech and payments.
FisentToronto financial technology company
FoundationCompany formation and early product work
PrivateEarly financing details not publicly disclosed
Financial ServicesBanking technology, compliance and operations
UnavailableEarly customer evidence is not public
Enterprise AutomationWorkflow and financial technology providers
Fisent's foundation gives the company operating knowledge of financial institutions before generative AI becomes its commercial focus.
Information notice: Private company estimates are identified and attributed. Information may change after the stated update date. This content is provided for informational purposes only and does not constitute investment, financial or legal advice.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |