Global fintech and funding innovation ecosystem

Category Archives: Fintech AI/ML, Data-driven, Automation, Generative AI

IOSCO AI Supervisory Toolkit For Capital Markets

June 16, 2025 | NCFA Resource | Risk Compliance And Regtech, Artificial Intelligence And Data, Regulation And Policy

IOSCO AI supervisory toolkit resource covering governance, model risk, oversight, and market integrity in capital markets

Practical Oversight Tools For AI Use In Capital Markets

On May 25, 2026, the International Organization of Securities Commissions (IOSCO) published its Supervisory Toolkit for Artificial Intelligence Use in Capital Markets. The report provides practical tools for regulators supervising AI systems used by market participants, exchanges, investment firms, and capital market infrastructure providers.

The toolkit arrives as AI goes beyond experimentation and into production environments across trading, surveillance, compliance, onboarding, fraud detection, customer service, research, risk management, and operational workflows. IOSCO focuses on the supervisory questions regulators need to ask rather than promoting a specific technology approach.

Stakeholder Input Opportunity: IOSCO is also seeking feedback related to the toolkit and AI supervision in capital markets. Interested regulators, market participants, technology providers, academics, and industry stakeholders can review the report and submit responses to IOSCO by this short survey by June 26, 2026.

What The Toolkit Covers

The report organizes supervision around seven areas. These include governance and accountability, model development and testing, data quality and management, monitoring and controls, outsourcing and third party providers, market conduct risks, and operational resilience.

Rather than prescribing rules, IOSCO provides supervisory questions, review approaches, and practical considerations that regulators can use when assessing AI systems operating in capital markets. The toolkit is designed to support risk based supervision while remaining flexible as technologies evolve.

The report also recognizes that AI risks often emerge from combinations of factors rather than a single model failure. Poor quality data, weak governance, limited oversight, inadequate testing, vendor dependencies, and insufficient monitoring can interact in ways that create market, operational, or investor protection concerns.

Why It Matters

Many financial institutions are already deploying AI in regulated environments. The challenge is no longer whether AI will be used. The challenge is whether firms can demonstrate appropriate governance, explainability, oversight, and accountability once those systems affect clients, markets, or investment decisions.

For fintech operators, the toolkit offers a useful preview of the questions regulators may increasingly ask during examinations, supervisory reviews, audits, and risk assessments. Firms that build governance and controls into deployment processes early may face fewer compliance and operational challenges as expectations mature.

Who Gets Value

This resource is useful for securities regulators, exchanges, investment dealers, fintech founders, regtech providers, compliance teams, AI governance specialists, risk managers, and market infrastructure operators.

It is especially relevant for organizations using AI in trading, surveillance, onboarding, fraud detection, compliance monitoring, client communications, investment research, portfolio management, or operational decision making.

Strengths And Limits

The strength of the toolkit is its practical orientation. It extends beyond high level AI principles and focuses on supervision, controls, accountability, and operational implementation. The framework can be applied across a wide range of AI use cases and organizational structures.

It also provides a common language that regulators and industry participants can use when discussing AI oversight. That consistency becomes increasingly important as firms operate across multiple jurisdictions with different regulatory approaches.

The toolkit does not create binding rules or regulatory obligations. IOSCO's role is to provide guidance and supervisory tools that member jurisdictions can adapt to their own legal and regulatory frameworks.

Key Resources

IOSCO Supervisory Toolkit For AI Use In Capital Markets (primary resource)

IOSCO Media Release (official announcement)

AI Agents Enter Governed Financial Workflows (AI governance and oversight)

Customer Due Diligence Controls For Fintechs (controls, monitoring, and accountability)


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

How Canadian Investors Are Navigating the US Real Estate Market Using PropTech

Jun 15, 2026

More and more Canadians are no longer leaving the business of cross-border acquisitions to institutional investors, and they are increasingly relying on technology to simplify international purchases. Whether accessing real estate market data and analyses or taking a virtual walk through properties, the evolution of PropTech has significantly altered how investors can scout, assess, and acquire assets abroad.

The appeal is evident: Investors can browse neighborhoods, compare yields, and contact service providers from their own homes, without needing to travel. Technology has helped overcome many of the conventional barriers of purchasing overseas real estate.

However, technology is only one component of the equation, and the key to making the right decision still lies with a deeper understanding of the market and local expertise.

Why Do Canadian Investors Continue to Look South for Real Estate Opportunities?

There are a number of things that make America attractive. Firstly is scale: you have thousands of cities, many with their own driving forces, their own pricing structure, and rental possibilities. Secondly, many areas in the US have an entry price point that is lower than in the large Canadian metro cities; diversified investors can find regions that offer higher cash flow potential and a wider array of inventory to choose from.

Thirdly is the diversity of the economies, so in one city there could be employment growth from the medical field, another from technology, and another from tourism: these provide diversification across sectors, reducing concentration of risk.

Fourth is movement of currency; at various times favorable exchange rates can make buying opportunistic in US real estate and encourage purchasing. Fifth and perhaps most importantly, many investors recognize US property for long-term wealth accumulation as well as supplementing their existing real estate holdings in Canada.

The Growing Influence of PropTech in Cross-Border Investing

PropTech has dramatically changed the way that investing is performed. Researching a foreign market used to involve many trips and scarce data points.

Digital platforms now allow immediate viewing of market statistics, population reports, rental data, and transaction records. This allows investors to view options from home and pre-qualify their search before proceeding. AI allows investors to take advantage of predictors that indicate growing jobs, rental rates, and infrastructure developments. Electronic document systems further streamline transaction processes by allowing contracts, disclosures, and loan documents to be viewed and electronically signed.

Virtual property tours enhance accessibility and allow buyers to view a property and area without actually going there. PropTech has given Canadians an experience with investing in American property that can now be performed more quickly and knowledgeably than ever before.

How Canadian Investors Are Using Data to Identify High-Potential US Markets

Property intelligence – Data is quickly becoming one of real estate’s most prized assets. Canadian buyers are reviewing population migration trends, job numbers, school scores, and investment in infrastructure before choosing where to buy. There are fewer assumptions and more calculations involved. Rental performance indicators offer data to gauge anticipated occupancies, average rents, and overall income for a property.

Many also follow the number of building permits issued as a predictor of market confidence or for the impact that a build may have on supply. Statistics surrounding migration give further data points for regions experiencing an influx from those new to the workforce or in retirement.

News about business expansion, road improvements, or the number of crimes are all part of the picture. This approach eliminates the assumptions—there's a data-driven reason to consider some markets over others before other investors catch on.

The Importance of Local Real Estate Guidance in a Tech-Driven Market

We have a powerful arsenal of technology. Technology alone will not replace ground-level knowledge, though.  As Jeff Tricoli, the prominent Southeast Florida real estate broker, puts it:

"I believe real estate is built on clarity, trust, and education. We guide clients with market insight. So every decision is informed and not speculative in manner."

Challenges That PropTech Cannot Fully Eliminate

However, technology cannot solve all issues. Cross-border taxation, for instance, is still a thorny subject. Investors need to be able to familiarize themselves with disclosure rules, ownership, and potential liability in two different countries.

Financing can also be tricky. Banks lend at different rates and have different criteria, and one might not be able to get good terms without more extensive paperwork. The law varies by state. Each has its own set of laws regarding what a landlord may and may not do, how to evict, and what must be disclosed to the tenant. Another problem has to do with interpreting data. The internet can flood you with information, but if you don’t interpret it correctly, you may end up making a mistake.

The market is another quick-changing variable. One that appears robust today might not be tomorrow if some new economic trend or government action destabilizes it. Ultimately, human acumen is still important. Networks of local experts—lawyers, accountants, brokers, and the like—still matter for a successful deal. Technology, in the absence of it, is certainly not a replacement for diligent investigation.

Future Trends Shaping Canadian Investment in US Real Estate

It is also reasonable to assume that PropTech will continue to evolve and exert influence. The predictive capabilities of artificial intelligence could be enhanced in such a way that investors know which neighborhoods will perform best. They will also happen to be the neighborhoods that will be in most demand in the future.

The use of blockchain will undoubtedly streamline transactions, as well as increase security with records. It is likely that data will also be more thoroughly integrated. Investors could be provided with a suite of not only market analysis tools but also financing, legal advice, and property management information.

Conclusion

Interest from Canadians remains strong because the United States offers size, variety, and scope for portfolio growth.

Proptech has changed the way investors look at cross-border transactions. Data analytics, virtual tours, prediction technology, and online platforms allow for easy research and access to investments.

See:  The Role of Home Automation in Future-Proofing Systems

However, tech is not a total substitute for local experience and knowledge. Legal, tax, financing, and neighborhood issues require local input. Hope this read helped you and best of luck on your journey in this way.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

NCFA Weekly Fintech Intelligence Jun 6-12, 2026

June 6, 2026 | NCFA Fintech Whisperer | Digital Assets Blockchain And Tokenization, Payments And Market Infrastructure, Artificial Intelligence And Data, Capital Markets And Market Infrastructure, Regulation And Policy, Risk Compliance And Regtech

Image Freepik, Data visualization signals

Image: Freepik

This live weekly NCFA intelligence page tracks financial technology developments that significantly affect how fintechs build, sell, raise capital, and operate under scrutiny. Coverage prioritizes Canada and includes global events that directly influence competitive conditions, market access, and execution realities across fintech sectors.  This page will be updated throughout the week with market movers in a live format and then each week we'll close the prior week's contents in prep for the upcoming week, and continue on a rolling basis.  (Missed prior week's Fintech Whisperer?  (December 6-12, 2025, December 13-19, 2025, January 1-9, 2026, January 10-16, 2026, January 17-23, 2026, January 24-30, 2026, January 31-February 6, 2026, February 7-13, 2026, February 14-20, 2026, February 21-27, 2026, February 28-March 6, 2026, March 7-13, 2026, March 14-20, 2026, March 21-27, 2026, March 28-April 3, 2026, April 4-10, 2026, April 11-17, 2026, April 18-24, 2026, April 25-May 1, 2026, May 2-8, 2026, May 9-15, 2026, May 16-22, 2026, May 23-29, 2026, May 30-Jun 5, 2026).

Weekly Fintech Market Intelligence Jun 6 - Jun 12, 2026

Digital Assets Blockchain And Tokenization

Citi Launches Tokenized Depositary Receipts For Private Company Shares

June 11, 2026, United States
  • Citi launched Digital Depositary Receipts that provide investors with blockchain based exposure to private company shares through a familiar depositary receipt structure.
  • Citi acts as both issuer and custodian while using regulated blockchain infrastructure operated by SIX for tokenization, settlement, and safekeeping.
  • The offering is designed to broaden access to private markets as companies remain private for longer and investor demand for private market exposure continues to grow.

Citi is combining traditional securities infrastructure with blockchain based issuance, custody, and settlement for private company equity. The launch adds another proof point that tokenized infrastructure is changing how markets operate, especially as banks, exchanges, and market operators compete to define how private assets move onto digital rails.

zerohash Adds Hyperliquid Assets For Embedded Crypto Infrastructure

June 11, 2026, United States
  • zerohash added support for HYPE, USDC.HYPE, and USDT.HYPE.
  • The company listed Kalshi and Public among early partners using the integration.
  • zerohash says its platform supports more than 100 digital assets across 200 jurisdictions through one integration covering custody, liquidity, compliance, settlement, and blockchain connectivity.

Digital asset access is being packaged for banks, brokerages, fintechs, and platforms that do not want to build the full crypto stack themselves. The control point is the embedded infrastructure that handles custody, liquidity, compliance, settlement, and connectivity behind the customer experience.

DBS To Offer Tokenized Physical Gold To Retail Customers

June 11, 2026, Singapore
  • DBS plans to offer DBS Physical Gold Tokens through its digibank app in the second half of 2026.
  • Each token will be backed by one gram of physical gold held in a dedicated Singapore vault.
  • DBS is also exploring listing the token on DBS Digital Exchange for accredited investors and institutions.

Tokenized real world assets are moving into bank distribution channels. DBS is turning physical gold into a digital product that can sit inside a retail banking app, while also testing institutional market access through its digital exchange.

NYDFS Proposes Stablecoin Rules Under Federal GENIUS Act Framework

June 9, 2026, United States
  • NYDFS proposed stablecoin regulation to align New York’s rules with federal GENIUS Act requirements.
  • The proposal covers reserve assets, custody limits, risk management programs, internal controls, independent audits, and service provider oversight.
  • Existing New York licensed stablecoin issuers would have a transition period, with public comments due by July 20, 2026.

Stablecoin supervision is moving from broad policy debate into operating rules. Issuers, custodians, exchanges, auditors, compliance vendors, and payment firms need to track how reserve custody, internal controls, audits, and service provider oversight become part of stablecoin market access.

Payments And Market Infrastructure

Visa Adds AI, Stablecoin, And Token Tools For Programmable Commerce

June 10, 2026, United States
  • Visa announced new AI, stablecoin, and token capabilities at Visa Payments Forum.
  • The updates include Agent Score, Agentic Directory, an OpenAI partnership, token assurance signals, and Large Transaction Model fraud tools.
  • Visa also highlighted stablecoin settlement work as card networks position themselves for agentic and programmable commerce.

Card networks are building trust infrastructure for AI driven payments. Visa’s updates add another network level proof point that identity, authorization, fraud controls, tokenized credentials, and settlement will shape how AI agents are allowed to transact.

EBANX Says Pix Automático Is Expanding Subscription Payments In Brazil

June 11, 2026, Brazil
  • EBANX reported that 64% of Pix Automático users paying digital platforms are new users.
  • Active enrollments have grown at an average monthly rate of 177% since June 2025, while transaction value grew 53% per month.
  • EBANX says it processes 38% of all Pix Automático transactions.

Recurring payment rails are becoming a financial inclusion tool when they help users pay for digital services without relying on credit cards. Brazil’s Pix Automático data shows how local real time payment infrastructure can support subscriptions, platform access, and digital commerce growth.

Mastercard Launches Agent Pay For Machines

June 10, 2026, Global
  • Mastercard launched Agent Pay for Machines to support machine-to-machine payments across connected devices, vehicles, robotics, and other autonomous systems.
  • The program brings together identity, authorization, transaction controls, card rails, bank account payments, and stablecoin settlement options.
  • More than 30 early supporters include Adyen, Ant International, BVNK, Checkout.com, Cloudflare, Coinbase, Global Payments, OKX, Stripe, and Tempo.

Agentic payments are moving from checkout experiments into network infrastructure. Payment firms, AI platforms, stablecoin providers, banks, and identity vendors now have to solve authorization, spending limits, settlement, fraud controls, and liability for machines that can transact without a human at every step.

Major U.S. Banks Launch Tokenized Commercial Bank Money Initiative

June 6, 2026, United States
  • A group of major U.S. financial institutions announced a shared on chain commercial bank money network designed to support regulated digital payments and settlement.
  • The initiative connects existing banking infrastructure with tokenized commercial bank deposits and programmable payment capabilities.
  • The network targets corporate treasury, liquidity management, and cross border payment use cases where banks, stablecoin issuers, and tokenized money market products increasingly compete.

Large banks are building their own tokenized money infrastructure rather than relying on third party stablecoin networks. Payment providers, treasury platforms, and financial institutions now face a more competitive settlement environment as bank money, stablecoins, and tokenized commercial bank deposits compete for transaction flow.

UQPAY Joins Circle Payments Network For Stablecoin Account Infrastructure

June 9, 2026, Australia
  • UQPAY integrated with Circle Payments Network to support cross border stablecoin transactions across its global account infrastructure.
  • Circle Payments Network operates as a coordination layer for participating institutions, payment providers, and businesses using stablecoins for global money movement.
  • The integration adds another account and API provider to Circle’s stablecoin payment network.

Circle Payments Network continues to add distribution. Business accounts, treasury platforms, and payment providers are becoming part of the stablecoin settlement infrastructure rather than simply connecting to it.

Circle Launches cirBTC As Bitcoin Collateral Infrastructure

June 9, 2026, United States
  • Circle launched cirBTC on Ethereum as a Bitcoin backed token redeemable 1:1 for BTC.
  • cirBTC is designed for lending, trading, liquidity, and collateral use cases across supported blockchain ecosystems.
  • The launch extends Circle’s infrastructure footprint beyond stablecoins into Bitcoin backed collateral markets.

Circle is extending its infrastructure footprint from stablecoins into Bitcoin collateral. Builders now have another institutional grade option for collateral and tokenized asset applications.

Artificial Intelligence And Data

Coinbase Launches Financial Execution Tools For AI Agents

June 11, 2026, United States
  • Coinbase launched Coinbase for Agents, which lets AI agents connect to a Coinbase account to trade, pay, and execute workflows within user controlled limits.
  • The tool is available through MCP and CLI, giving developers a way to connect agent workflows with crypto accounts and payments.
  • The launch extends Coinbase’s agentic web direction from agent creation toward account execution.

AI agents are moving from recommendation and discovery toward financial execution. Coinbase for Agents puts user controlled account access, payments, trading, and workflow automation into the same agentic finance conversation as network trust controls, stablecoin settlement, fraud prevention, and responsible AI governance.

FSB Consults On Responsible AI Practices For Financial Institutions

June 10, 2026, Global
  • The Financial Stability Board published a consultation report on responsible AI adoption by financial institutions.
  • The report proposes 12 sound practices covering organisation wide AI governance, AI lifecycle management, explainability, performance monitoring, human oversight, cyber risk, agentic AI, and third party risk.
  • Comments are due by July 22, 2026 through the FSB consultation process at the official consultation portal.

AI supervision in finance is evolving from broad risk discussion toward operating practices for boards, senior management, compliance teams, model owners, technology vendors, and supervisors. Financial institutions need to track how governance, documentation, human oversight, cyber controls, and third party dependencies become part of responsible AI adoption.

Capital Markets And Market Infrastructure

Pyth Launches 24/7 Indices For Equities, Metals, And Oil

June 10, 2026, Global
  • Pyth Network launched proprietary 24/7 index products across U.S. equities, metals, and oil.
  • The indices are designed for always-on markets, including tokenized assets, perpetuals, prediction markets, and crypto-native derivatives.
  • Early users include Coinbase, Kraken, dYdX, and Nado, with MarketVector partnering on equity index futures.

Always-on markets need reference data that does not stop when traditional exchanges close. Exchanges, tokenized asset platforms, derivatives venues, market makers, and risk teams now have another pricing source to evaluate as real-world assets trade across crypto-native market infrastructure.

EDGE Markets Raises $29.2M For Prediction Market Banking Rails

June 8, 2026, United States
  • EDGE Markets raised $29.2M in Series A funding led by CoinFund to launch banking infrastructure for prediction market participants.
  • EDGE Pro is designed for market makers, professional traders, funds, and corporations that need treasury, margin, settlement, and banking workflows connected to regulated prediction market exchanges.
  • EDGE Connect is a purpose built payment rail for gaming and prediction markets, including real time deposits and faster access to trading capital.

Prediction markets are starting to need the same financial plumbing as capital markets. Market makers, exchanges, payment providers, banks, and compliance teams now need infrastructure that can handle deposits, margin, settlement, risk controls, and regulated access without slowing down trading activity.

Regulation And Policy

CFTC Proposes Event Contract Rules For Prediction Markets

June 10, 2026, United States
  • The CFTC published a Notice of Proposed Rulemaking seeking public comment on amendments to Regulation 40.11 and a new Appendix F to part 40.
  • The proposal sets out how the CFTC would review event contracts tied to enumerated activities, including terrorism, assassination, war, gaming, and unlawful activity.
  • The rulemaking arrives as prediction market platforms, sportsbooks, exchanges, and state gaming regulators debate which event contracts can trade in federally regulated markets.

Prediction markets are moving from platform experimentation and court fights into formal rule design. Kalshi, Polymarket, DraftKings, Flutter/FanDuel, exchanges, market makers, compliance teams, sports leagues, and retail users now have a clearer process to debate which contracts belong in derivatives markets and which remain too close to gaming, misconduct, or public interest risk.

Risk Compliance And Regtech

FCA Uses Special Administration Powers Against E-Money Firm Over Financial Crime And Governance Concerns

June 12, 2026, United Kingdom
  • The UK Financial Conduct Authority (FCA) obtained a court order appointing special administrators to Euro Exchange Securities UK Limited (EES), an authorised e-money institution.
  • The FCA cited concerns relating to financial crime controls, safeguarding arrangements, ownership, governance, and the firm's ability to operate in a safe and sound manner.
  • EES was required to stop providing regulated e-money and payment services on June 4, 2026. The FCA stated this was the first time it had sought a special administration order for an authorised payment or e-money firm.

Financial crime compliance is increasingly becoming an existential regulatory issue rather than a supervisory issue alone. Payment firms, e-money institutions, fintechs, compliance teams, and investors should watch how regulators use governance, safeguarding, ownership, and financial crime controls as indicators of firm viability. The action signals that supervisory concerns can now lead to intervention measures that effectively remove a regulated firm's ability to continue operating.

Canada Introduces Digital Safety Rules For Social Platforms And AI Chatbots

June 10, 2026, Canada
  • The Government of Canada introduced Bill C-34, the Safe Social Media Act, to create new digital safety obligations for social media services and AI chatbot services.
  • The bill would create the Digital Safety Commission of Canada and give it oversight, compliance, and enforcement powers.
  • Covered services would need safety plans, youth protection measures, reporting processes, and risk controls for harmful content and online harms.

Canada is pulling AI chatbots into platform safety regulation. AI firms, social platforms, trust and safety teams, identity providers, and compliance vendors should watch how age assurance, safety controls, reporting duties, and enforcement rules develop as digital safety becomes part of regulated online infrastructure.

South Korea Urges Major Financial Groups To Strengthen Defences Against AI Enabled Fraud And Cyber Threats

June 10, 2026, South Korea
  • South Korea's Financial Services Commission (FSC) convened the chief executives of five major financial holding companies to discuss cybersecurity risks and fraud threats emerging during AI driven digital transformation.
  • FSC Chairman Lee Eog-weon warned that artificial intelligence is increasing the sophistication of cyberattacks, voice phishing schemes, and other fraud techniques targeting financial institutions and consumers.
  • Financial groups were encouraged to strengthen cyber defence capabilities, expand security investments, improve threat detection systems, and enhance operational resilience as AI adoption accelerates across the sector.

Financial supervisors are beginning to treat AI as both a productivity tool and a threat multiplier. Banks, insurers, payment firms, fintechs, and security providers should expect greater scrutiny of fraud controls, cyber resilience, operational risk management, and third party technology oversight as regulators adapt supervision to an AI enabled threat environment.

UK Launches Review Into Access To Banking Services

June 10, 2026, United Kingdom
  • HM Treasury launched an independent review into access to banking services for consumers, small businesses, charities, and community groups.
  • The review will examine access to bank accounts, branch and in person services, SME lending, credit unions, and commercial credit data sharing.
  • The review is accepting evidence until August 13, 2026 and is expected to make recommendations by October 2026.

Banking access is moving back onto the policy agenda as branch closures, digital exclusion, SME credit access, and local service gaps put pressure on financial providers. Banks, fintechs, credit unions, open finance firms, and data providers should watch whether the review leads to new access rules, credit data reforms, or stronger expectations around community banking infrastructure.

Palantir Challenges Blocked Metropolitan Police Contract

June 10, 2026, United Kingdom
  • Palantir is reportedly preparing legal action after London Mayor Sadiq Khan blocked a proposed Metropolitan Police contract estimated at approximately £50 million.
  • The dispute centres on deployment of Palantir’s data analytics and operational intelligence software within policing operations.
  • The case follows wider UK debate around public sector use of advanced data and AI systems, including scrutiny of major government technology contracts and vendor relationships.

As advanced analytics become embedded in public institutions, governance questions increasingly extend beyond model performance. Procurement authority, accountability, oversight, operational dependence, switching costs, and public trust all influence how critical decision systems are adopted and maintained. The organisations that govern these systems may become as important as the organisations that build them.

Conclusion

The common thread is not AI, stablecoins, tokenization, or payments. It is access. Access to financial infrastructure, access to payment rails, access to private markets, access to banking services, access to digital assets, and increasingly access to machine driven financial execution. The next competitive battleground may not be who builds the best financial products, but who controls the rules, permissions, trust layers, and infrastructure that determine who can participate and under what conditions. Recent developments suggest those boundaries are on the move. NCFA offers various curated resources to help founders and investors stay current on developments that impact fintech markets, subscribe to NCFA weekly newsletter updates, view a rundown of current fintech news and insights, or dive into the latest fintech industry research.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

How OpenAI And Anthropic Reached Public Markets

June 10, 2026 | NCFA Story Intelligence | Capital Markets And Funding

NCFA Story – How OpenAI And Anthropic Reached Public Markets

Research Rivalries, Cloud Alliances, Investor Conviction, Governance Debates, And Massive Capital Flows Along The Journey

On June 8, 2026, OpenAI confirmed it submitted a confidential S-1 to the U.S. Securities and Exchange Commission. One week earlier, Anthropic disclosed its own confidential draft registration statement for a proposed IPO.

The filings are the trigger, not the story. The story is how frontier AI moves from research labs and safety debates into consumer adoption, cloud alliances, investor conviction, copyright fights, government interest, near trillion dollar private valuations, and the public market gate.

OpenAI starts with a promise that sounds almost incompatible with public markets.1 In 2015, it begins as a nonprofit AI research company with a mission tied to broad public benefit, not shareholder return. That tension does not matter much while the work sits inside research circles. It matters once OpenAI becomes strategically important.

Anthropic comes from inside the same argument.2 Founded in 2021 by former OpenAI researchers, including Dario Amodei, Anthropic builds its identity around reliable, interpretable, and steerable AI systems. It is not just another model company. It is a different answer to a question OpenAI helped make unavoidable.

The First Question Is Control

Before AI becomes a product, it is already a governance problem. OpenAI and Anthropic begin with different promises about how powerful systems should be built, released, and controlled. Those promises stay abstract until the technology leaves the lab.

ChatGPT turns frontier AI into a public habit.3 The late 2022 launch changes the audience almost overnight. Students, founders, developers, workers, executives, and investors start testing advanced AI directly. Reuters later reports ChatGPT reached an estimated 100 million monthly active users in January 2023.4

Claude takes the quieter enterprise path.5 It does not create the same consumer spectacle, but Anthropic leans into reliability, predictable deployment, and safety as commercial positioning. Trust becomes part of the product, especially for organizations that need governance controls before they scale AI usage.

AI Leaves The Lab

Once ChatGPT and Claude reach users, frontier AI stops being a conversation among researchers. Technical choices become product choices. Governance choices become customer trust choices. The audience expands, and with it the expectations placed on the companies building these systems.

Microsoft turns OpenAI into one of the largest strategic bets in technology.6 The relationship gives OpenAI more than capital. Azure becomes part of its operating foundation, with cloud infrastructure, enterprise distribution, and credibility arriving at a moment when many buyers are still trying to understand what generative AI can become.

Anthropic attracts a different group of believers. Google backs the company. Amazon commits billions and makes Anthropic central to its AI strategy, while AWS becomes Anthropic's primary cloud and training partner.7 Spark Capital and Menlo Ventures remain part of the journey as Anthropic grows from safety focused startup into one of OpenAI's strongest challengers.

The Backers Climb Aboard

The next chapter is not written by engineers alone. Microsoft, Amazon, Google, Spark Capital, Menlo Ventures, and later giant late stage investors all become part of the frontier AI story. They are not only financing growth. They are shaping access to compute, distribution, enterprise customers, and the resources required to scale.

OpenAI remains the company everyone else measures against. ChatGPT gives OpenAI distribution, developer attention, and brand recognition. Microsoft's partnership gives it reach into enterprise software. That combination makes OpenAI powerful, but it also makes dependency risk more visible for large buyers.

Anthropic becomes strategically useful because it is different. Claude's role in enterprise productivity and financial workflows shows how a trust first product can become a real alternative. When Microsoft brings Claude into Office productivity, the message is practical: even OpenAI's most important partner wants more than one AI supplier in the stack.

Nobody Wants One Supplier

The first phase of frontier AI is about building the best model. The next phase is about avoiding dependence. Enterprises want performance, but they also want options. The more important AI becomes inside workflows, the less comfortable buyers become with relying on one provider.

OpenAI's success creates a new constraint. The company is no longer trying to prove that people will use frontier AI. ChatGPT already answered that question. OpenAI now has to fund the compute, deployment, developer usage, and enterprise adoption needed to keep the flywheel turning.

Anthropic faces the same pressure through Claude demand. Its Series H announcement points to global enterprise adoption, expanded compute capacity, Amazon, Google, Broadcom, SpaceX, and chip partners including Micron, Samsung, and SK hynix.8 The company's careful brand does not reduce its need for industrial scale infrastructure.

Success Gets Expensive

The market no longer needs proof that people will use frontier AI. It needs proof that someone can afford to keep building it. Better models need more compute, larger training runs, power, cooling, chips, data centres, and capital. What starts as software begins to look like infrastructure.

Learn more

AI looks like software when someone types into a chatbot. It looks different when Microsoft, Amazon, Google, NVIDIA, utilities, chipmakers, and data centre operators start absorbing the cost and opportunity behind it.

The lesson travels beyond AI. When a new technology breaks out, the scarce resource often changes. At first, everyone watches the product. Then the bottleneck moves somewhere else. Distribution. Capital. Compute. Regulation. Trust. The winners often see the next bottleneck before it becomes obvious.

Questions worth watching

Learn more: AI leaders and energy infrastructure | Amazon and Anthropic alliance

OpenAI's rise brings copyright and publisher pressure with it. The more useful the models become, the more valuable the training inputs appear. News organizations, authors, artists, and creators increasingly ask how their work contributes to model capability and who captures the value created from it.

Anthropic faces the same ownership question through Reddit. The Reddit lawsuit against Anthropic puts training data claims, platform rights, and AI accountability into the story. The issue is not only whether AI can learn from the web. It is who gets a say when web content becomes commercial fuel.

The Internet Pushes Back

Frontier AI learns from the internet. Eventually the internet asks questions back. Reddit, publishers, authors, artists, platforms, communities, and regulators all start examining how training data is collected, used, attributed, and monetized. Capability is no longer the only story. Ownership enters the room.

OpenAI's control questions become public in 2023.9 The board removes Sam Altman, then reverses course after pressure from employees, customers, investors, and partners. The episode is brief, but it changes how people read the company. Governance becomes part of valuation risk.

Anthropic's safety stance faces real world tests. Its product identity is tied to reliability and responsible deployment, but governments, enterprises, and defence buyers want more capability. The tension between safety commitments and state power is already visible in AI ethics, state power, and red lines.

The World Enters The Room

At some point, the story stops belonging only to founders, engineers, and investors. Governments, defence organizations, EU regulators, energy planners, enterprise buyers, and national AI policy teams all want a say. AI is no longer just a product category. It is becoming strategic infrastructure.

Learn more

The governance debate does not arrive after commercialization. It grows alongside it. Every increase in capability attracts new stakeholders, and every new use case creates new pressure around safety, transparency, liability, and control.

The same pattern appears in infrastructure. As AI systems become more capable, the demand for energy, data centres, and cloud capacity becomes harder for governments to ignore. That is why AI policy increasingly sits beside energy policy, competition policy, defence strategy, and public market disclosure.

Questions worth watching

  • What governance structures work when AI companies become strategic infrastructure?
  • How much transparency will public markets demand from frontier model companies?
  • Can safety commitments survive commercial and geopolitical pressure?

Learn more: AI ethics, state power, and red lines | EU AI transparency rules | AI leaders and energy infrastructure

OpenAI's March 2026 financing makes the capital story impossible to ignore.10 The company closes $122B USD in committed capital at an $852B USD post money valuation. The round is anchored by Amazon, NVIDIA, and SoftBank, with continued participation from Microsoft. SoftBank co leads alongside a16z, D. E. Shaw Ventures, MGX, TPG, and accounts advised by T. Rowe Price Associates.

Anthropic's May 2026 Series H shows the same private market scale.11 The company raises $65B USD at a $965B USD post money valuation. Altimeter Capital, Dragoneer, Greenoaks, and Sequoia Capital lead the round, with Capital Group, Coatue, D1 Capital Partners, GIC, ICONIQ, and XN also co leading. Amazon's prior commitment remains part of the picture, along with Google, Broadcom, SpaceX, and chip partners.

Who Was Already On The Boat?

By the time public investors approach the dock, Microsoft, Amazon, Google, NVIDIA, SoftBank, Thrive Capital, Altimeter, Dragoneer, Greenoaks, Sequoia, employees, founders, and secondary market investors have already spent years funding the frontier AI race. The question is no longer whether value was created. It is who captured it before public access arrived.

Learn more

This is where capital formation becomes interesting. Public investors are increasingly evaluating businesses that have already passed through research funding, venture capital, strategic partnerships, secondary transactions, and late stage private rounds.

The useful question is not whether investors deserve earlier access. Earlier access brings different risks, thinner disclosure, and liquidity challenges. The better question is whether capital formation models designed for earlier innovation cycles still fit a world where companies can remain private for so long.

Want more stories on innovation, investor access, and capital formation? Subscribe to NCFA's weekly newsletter.

Questions worth watching

  • Will secondary markets become a normal part of late stage innovation finance?
  • Can tokenized ownership models improve access without weakening investor protection?
  • How should public markets value companies where much of the upside has already been priced privately?

Learn more: Financial Innovation Map

OpenAI follows on June 8 and keeps timing open.12 The company confirms it submitted a confidential S-1 but says it has not decided when to go public. Public markets become an option, while OpenAI keeps weighing what may be easier to do as a private company.

Anthropic reaches the IPO gate first on June 1.13 The filing does not set share count or price. It gives the company the option to move after SEC review, market conditions, and other factors.

The IPO Gate Opens

Anthropic files. OpenAI follows. The filings themselves are not the climax. They are the checkpoint where private AI financing starts meeting public market disclosure. For years, most investors accessed frontier AI through Microsoft, Amazon, Alphabet, NVIDIA, and other infrastructure providers. Direct exposure to model companies may eventually be possible, but public investors are arriving after years of private price discovery.

Learn more

If either company proceeds, public markets will eventually ask questions private markets have mostly answered behind closed doors. Revenue quality, customer concentration, compute costs, cloud dependence, legal exposure, governance controls, and long term capital needs will all become easier to compare.

That disclosure may become the real turning point. It will show whether frontier AI economics look more like software, infrastructure, cloud services, or something new that capital markets have not fully learned to price.

Questions worth watching

  • What will public disclosure reveal that private financing did not?
  • How much of the upside has already been captured privately?
  • Will frontier AI be valued as software, infrastructure, or a new category?

Different origins. Different philosophies. Different investor groups. Different commercialization paths. Yet both companies arrive at the same gate.

The IPO filings don't end the frontier AI story. They mark the point where a decade of research, product adoption, infrastructure buildout, governance conflict, investor conviction, and public policy pressure begins meeting public markets.

For NCFA, this is where Story Intelligence connects to the Financial Innovation Map. The opportunity set includes private market liquidity, tokenized pre IPO access, AI infrastructure finance, prediction markets around IPO timing and valuation, disclosure standards, and investor protection for companies that may become public only after private markets have already priced much of the upside.

Looking Back

OpenAI and Anthropic followed different paths, attracted different allies, and made different decisions along the way. Yet both arrived at the same gate. That may say as much about the economics of frontier AI as it does about the companies themselves.

What Did You Think?

What part of the story stood out most to you?

Share this story → Explore related intelligence → Subscribe


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

5 Vendor Risk Platforms for Fintech IPO Readiness: Closing SOC 2 & SOX Gaps

Jun 9, 2026

Vendor Risk Platforms for IPO Readiness

Going public puts every control your fintech owns or outsources under a microscope. Auditors, regulators, and future shareholders want hard evidence that third-party weak spots cannot derail your debut.

Roughly 30% of breaches trace back to external suppliers, and each incident costs an average $4.44 million, according to IBM's 2024 Cost of a Data Breach Report. Advisers preparing S-1 filings increasingly want a repeatable way to assess outside cyber risk before the SEC asks, and investors read disciplined third-party oversight as a proxy for operational maturity.

Here is the catch: your SOC 2 program alone will not clear the public-company bar. SOC 2 demonstrates protection of customer data, while SOX 404 focuses on financial-reporting integrity. A purpose-built vendor-risk platform bridges that gap by connecting vendor security evidence to the controls auditors expect in an IPO cycle. We ranked five platforms on the criteria that matter most for IPO prep: compliance fit, automation depth, auditor acceptance, and cost-to-value.

How we ran the numbers

We started with fifteen tools from analyst waves, forums, and twenty competitor write-ups, then removed anything lacking a purpose-built vendor-risk module or fintech case study, leaving five contenders. We scored each on a 100-point scale across four questions:

  • IPO-compliance coverage (25 pts): Does it map evidence to SOC 2 and carry it forward into SOX 404 testing? Audit-ready exports earn full marks; static PDFs do not.
  • Automation & AI depth (25 pts): How much manual vendor-review work disappears? We looked for AI that flags risky answers and missing evidence, not chatbots that rephrase text.
  • Auditor & investor acceptance (20 pts): Big Four familiarity, repeat fintech IPOs, and recognizable trust signals reduce friction.
  • Cost-to-value ratio (15 pts): Subscription cost balanced against headcount savings and eleventh-hour consultants.

Two CISOs who took fintechs to market last year reviewed the weighting, confirming it reflects where auditors press hardest.

1. Vanta: your single pane of glass for vendor risk

Vanta

Vanta folds vendor oversight into the same dashboard you use for SOC 2, helping teams remediate risk up to 45% faster. VRM, compliance automation, Trust Center, and SOX ITGC live in one system with shared evidence and cross-framework mapping.

  • Ideal for: fintech security/compliance teams (~50 to 5,000 employees) running SOC 2 and standing up SOX ITGC readiness who want one platform over bespoke bank-style customization.
  • Vendor risk: three phases (discovery/onboarding, security reviews, continuous monitoring). Bulk CSV import, configurable intake (business criticality, integration access, data types). Shadow-SaaS discovery via Okta, Azure AD/Entra, and Google Workspace, extended through Jamf, Intune, and JumpCloud.
  • AI/automation: AI Questionnaire Review reads SOC 2 reports, ISO statements of applicability, PCI attestations, contracts, and trust-center materials, then drafts cited answers; gaps push to Jira and Slack.
  • Compliance depth: 35+ frameworks with cross-mapping. SOX ITGC out of the box with 33 controls and 15 core policies, an estimated 10 to 20 hours to complete, covering access management, change management, and IT operations (ITGC, not full financial process controls).
  • Monitoring/ecosystem: continuous vendor monitoring via the Riskey acquisition (third, fourth, nth-party signals); 400+ integrations (recent figures 430 to 450), 1,300+ automated tests including 146+ for AWS and 52 for Azure, tests can run hourly.
  • Implementation/pricing: VRM setup under one day with an existing identity provider; ~30-minute AI-assisted vendor reviews. VRM add-on around $300 per vendor per year, or about $600 bundled with Continuous Monitoring.
  • Limitations: no contract lifecycle management; limited board-level TPRM portfolio reporting; no proprietary vendor security rating; SOX financial process controls not native.
  • Customer signals: BVNK, MoonPay, Tyro Payments; SOX ITGC use at Ginkgo Bioworks and Taboola.

Verdict: best fit if your IPO plan needs one platform to run SOC 2, stand up SOX ITGC, and operationalize vendor oversight. If you need managed analyst services or board-ready vendor portfolio reporting, compare TPRM-specialized options.

2. Optro (formerly AuditBoard): SOX 404 depth auditors expect

Optro

Optro rebranded from AuditBoard in March 2026. It keeps the same product family public-company SOX teams know: SOXHUB (SOX program management), CrossComply (multi-framework compliance), and a connected TPRM module. More than half of the Fortune 500 use it, and it is one of the most common SOX systems Big Four auditors are comfortable testing.

  • Ideal for: late-stage fintechs (often 500+ employees) running or standing up a formal SOX program, where Finance/Internal Audit own SOX 404 and Security owns SOC 2, and a Big Four firm is expected.
  • Core capabilities: SOXHUB runs SOX 404 end to end (risk assessment, narrative documentation, walkthroughs, control testing, deficiency tracking, management response). Out-of-the-box content covers ITGC and key financial process controls including revenue, order-to-cash, and procure-to-pay. CrossComply extends to SOC 2 and ISO 27001; TPRM handles inherent-risk tiering, assessments, and remediation.
  • SOC 2/monitoring: lacks the compliance-automation flywheel (Trust Center, hourly tests, AI questionnaire review); continuous vendor monitoring relies on SecurityScorecard or BitSight.
  • AI: Optro AI for control mapping, document analysis, and narrative drafting; acquired FairNow in 2025 for AI governance. Enterprise-process AI rather than self-serve vendor-review agents.
  • Implementation/pricing: enterprise deployment, typically a few months to a couple of quarters, often partner-supported; quote-based pricing commonly in the high five to six figures annually.
  • Limitations: heavier and slower than compliance-automation platforms; TPRM is a module, not the centerpiece; no Trust Center; longer rollouts with professional services.

Verdict: choose Optro if full SOX 404 depth (ITGC plus financial process controls) and audit-firm fluency top your list. For SOC 2 day-to-day, a Trust Center, and AI-compressed vendor reviews, you will likely pair it with another platform.

3. OneTrust: enterprise GRC depth alongside privacy and ethics

OneTrust

OneTrust grew from privacy management into a broad GRC suite with a substantive third-party risk module, serving 14,000+ customers across regulated industries. It fits when vendor oversight has to live next to privacy, ethics, and ESG in one control fabric.

  • Ideal for: mid-market and enterprise fintechs (typically 250+ employees) with multi-jurisdictional exposure (EU, UK, US state privacy laws) and an established privacy program.
  • TPRM capabilities: full vendor lifecycle (tiering, risk rubrics, questionnaires, evidence, remediation, reassessment). The Vendorpedia exchange offers 6,000+ pre-completed vendor profiles.
  • SOC 2/SOX: supports SOC 2 program work but not as a fast-path; no out-of-the-box SOX 404 / ITGC content, a real gap for IPO programs.
  • Monitoring: continuous monitoring usually built on BitSight, SecurityScorecard, or RiskRecon (separate subscriptions).
  • Framework breadth: pre-built mappings across 20+ standards including DORA, NIS2, PCI DSS, and GDPR. Third-Party Risk Agent launched September 2025 with PDF-limited analysis; roughly 100 integrations, fewer than 50 out-of-the-box evidence collectors; SAP Ariba and ServiceNow are common pairings.
  • Pricing: small-business plans around $600 per month; enterprise deployments commonly $50K to $300K per year; the TPRM module $40K to $500K per year. Breadth comes partly from 11+ acquisitions, adding admin overhead.
  • Limitations: no out-of-the-box SOX 404 / ITGC; continuous monitoring depends on paid feeds; AI less mature; longer implementation; no fast-path SOC 2 flywheel.

Verdict: right when vendor risk must sit alongside privacy, ethics, and ESG in one enterprise fabric and you can absorb a longer rollout. To consolidate SOC 2, SOX ITGC, and AI-assisted reviews into one fast-moving platform, OneTrust typically needs pairing.

4. Prevalent (Mitratech): bank-grade TPRM depth

Prevalent

Prevalent is a pure-play TPRM platform with more than two decades of specialization, acquired by Mitratech in October 2024 and rated a Strong Performer in Forrester's Third-Party Risk Management Wave (Q1 2026). It is the heavyweight option when vendor risk itself is the program.

  • Ideal for: later-stage fintechs (often 500+ employees) with a dedicated TPRM function, bank-partner due diligence, or multinational regulatory requirements.
  • Core capabilities: full vendor lifecycle with 800+ pre-built assessment templates mapped across security, privacy, and financial-services requirements; inherent and residual risk scoring on a likelihood-and-impact model; shared assessment repositories via Vendor Intelligence Networks.
  • Continuous monitoring: 2,000+ data sources across five domains (cyber, operational, reputational, financial, regulatory), correlated with assessment results.
  • SOC 2/SOX: maps vendor responses to AICPA Trust Services Criteria and to SOX requirements for third-party oversight, but does not deliver SOC 2 for your org or SOX ITGC automation/testing.
  • Discovery/AI/integrations: no automated vendor discovery or shadow-IT detection; AI is NLP/ML document analysis; integrations target TPRM workflows (CLM, procurement) and risk feeds, not infrastructure testing.
  • Implementation/pricing: weeks to months, with "clunky" and "dated UI/UX" feedback and Forrester notes on workflow inflexibility; enterprise quote-based pricing with optional managed services.
  • Limitations: no GRC/compliance automation for your own SOC 2; no Trust Center; no automated discovery; longer implementation.

Verdict: choose Prevalent for bank-style TPRM depth, broad regulatory mapping, and multi-domain continuous monitoring. To collapse SOC 2, SOX ITGC, and vendor oversight into one platform, expect to add complementary tools.

5. Venminder: continuous oversight with managed services built in

Venminder

Venminder is a TPRM platform for regulated financial-services teams that want to outsource a share of vendor due diligence. It pairs software with managed services where certified analysts review vendor materials and deliver risk-rated outputs. Venminder was acquired by Ncontracts in September 2024 (Hg Capital-backed); it has 1,200+ customers, and the combined entity serves 5,000+.

  • Ideal for: lean compliance teams (often 1 to 5 people), banking/financial-services orgs optimizing for FFIEC-style oversight and examiner-ready reporting, and teams that value contract/SLA oversight.
  • Core capabilities: risk assessments with configurable scoring; template-driven questionnaires (including SIG variants) via a vendor portal; oversight and issue management; contract and SLA management with Venminder paralegals extracting key dates and renewal notifications. VenDiligence managed services use certified analysts (CISSP, CTPRP, CISA, CPA) to produce risk-rated reports.
  • SOC 2 fit: does not help you achieve SOC 2; its SOC Assessment service is an analyst-led review of a vendor's SOC 1 or SOC 2 report, including subservice organizations and complementary user entity controls (CUECs).
  • SOX: no explicit SOX 404 or ITGC support; plan a separate SOX approach.
  • Monitoring/integrations: Venmonitor integrates with SecurityScorecard and ArgosRisk across cyber, business health, privacy, ESG, and adverse-media signals; pre-built integrations include RSA Archer, SecurityScorecard, and ArgosRisk, with an API add-on.
  • Implementation/pricing: 30 to 90 days, code-free. Professional estimated $50,000 to $75,000 per year; Enterprise around $125,000 per year (AWS Marketplace), both with unlimited users and vendors; managed services priced per assessment.
  • Signals/limitations: 4.6/5 Gartner Peer Insights, 4.7/5 G2, Forrester Strong Performer; named customers include Billtrust, NewRez, Nations Lending, and MassHousing, with Flushing Bank and Frost Bank case studies. VRM-only with no GRC automation, no automated discovery, no AI questionnaire automation, limited integrations, and "rudimentary" reporting per Forrester.

Verdict: strong when capacity and expertise are the constraint and you want platform-plus-analysts diligence with contract oversight. To consolidate SOC 2 evidence, SOX ITGC, and VRM into one system, Venminder adds tool sprawl rather than reducing it.

Conclusion: Bridging SOC 2 and SOX, one vendor list, two audits

In most fintechs, SOC 2 lives with Security and SOX 404 with Finance, and your vendors sit in the overlap. Treat them as two programs and you get two inventories and two sets of audit questions that never reconcile. Build one vendor register that serves both audits instead.

See:  NCFA Financial Innovation Map

  1. Build one third-party inventory. Tag each vendor with two questions: does it handle customer data in your SOC 2 scope, and does it touch systems or reports that roll into your financial statements? The highest-scrutiny group is the vendors that are both.
  2. Collect the right evidence for the overlap vendors. Pull the vendor's SOC 2 report (security controls) and SOC 1 report or equivalent (financial-control design), and store both under the same vendor record.
  3. Cross-reference controls so one file supports two checks. If a vendor's change-management clause supports SOC 2 CC8, note that it also supports SOX ITGC Change-Management CM-1. Repeat for access reviews, incident response, and backup testing.
  4. Hand auditors a consolidated register showing which vendors matter to SOC 2, which to SOX, which to both, and where the evidence lives. That cuts follow-up meetings and keeps your IPO timeline from stalling in evidence-chasing.

NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

MindBridge Expands AI Audit Analytics Beyond Sampling

June 8, 2026 | NCFA Market Activity | Artificial Intelligence And Data, Risk Compliance And Regtech

AI Image – AI Audit Analytics

Full Population Analysis Gains Ground In Audit And Assurance

On June 8, 2026, Ottawa based MindBridge expands its AI audit and assurance platform to help audit teams review larger transaction populations and assess risk faster. The update adds full population analysis, subledger analysis, a Monetary Flow Dashboard, transaction level risk assessment, duplicate transaction controls, and large file processing.

MindBridge says KPMG deploys its platform through a global audit platform used in more than 60 countries. The company also points to recent partnerships with BDO and Buzzacott.

Sarah McGinnity, General Manager, Audit & Assurance Solutions at MindBridge:

“Audit and assurance teams are being asked to oversee larger transaction populations, more complex systems, and increasingly automated financial processes without adding proportional time or resources.”

Full Population Analysis Gains Ground

The most important part of the announcement is the focus on full population analysis.

Audit teams have traditionally relied on sampling. AI driven software now makes it possible to review entire transaction populations and identify unusual activity across much larger data sets. That can help auditors spend less time searching for issues and more time investigating the transactions that matter.

See:  AI Agents Enter Governed Financial Workflows

MindBridge is positioning its platform around that shift. The latest release gives users more visibility into transaction flows, subledger activity, and risk indicators across financial records.

Audit Technology Moves Into The Control Layer

Many AI products compete on productivity. MindBridge competes on audit quality, risk assessment, and financial controls.

It alters the buying decision. Audit firms, finance teams, and regulated organizations already need oversight, documentation, and evidence. They aren't looking for experimentation. They're looking for better ways to review growing volumes of financial data.

The trend extends beyond audit. Financial institutions are adopting AI in compliance, fraud detection, transaction monitoring, and operational risk. As NCFA noted in its coverage of regulated AI controls and governance, buyers increasingly want systems that support human judgment and provide a clear record of how decisions are made.

Talking Point

If audit software can test full transaction populations instead of samples, the value changes from finding anomalies after the fact to proving where financial risk may occur before judgment calls are made. That's where AI audit tools become useful to CFOs, auditors, and regulators: not as automation, but as evidence infrastructure.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter

 

Bybit Opens Tokenized IPO Access To Retail Investors

June 8, 2026 | NCFA Insight | Digital Assets Blockchain And Tokenization

AI Image – retail public market access

IPO Distribution Enters The Tokenization Era

On June 7, 2026, Bybit launched IPO Express, a platform that gives eligible users access to tokenized IPO allocations starting with SpaceX. The launch arrives as SpaceX prepares for a public offering expected to value the company at approximately $1.75 trillion, making it potentially one of the largest IPOs ever. While the SpaceX name grabs attention, the bigger story is what this says about investor access, capital formation, and the growing role of digital infrastructure in public markets.

While the SpaceX name grabs attention, the bigger story is how firms are competing to expand investor access and improve IPO distribution.

How Tokenized IPO Access Works

Traditional IPO allocations typically flow through investment banks, brokerage firms, institutional investors, and private banking networks. Retail investors often participate only after public trading begins.

Bybit's model broadens access by allowing eligible users to subscribe through exchange infrastructure before trading starts. Investors can receive allocations and subsequently trade tokenized exposure through the platform.

The model combines several functions that have historically operated through separate systems, including investor onboarding, allocation management, compliance, custody, ownership records, and trading. Companies are now competing to modernize how investors access public offerings.

IPO Distribution Faces New Competition

Much of the discussion around how tokenization is changing markets has focused on stocks, bonds, funds, real estate, and other assets after issuance. IPO Express focuses on an earlier stage of the investment lifecycle.

For decades, financial innovation concentrated around trading efficiency, lower transaction costs, and faster settlement. Tokenized IPO access targets a different challenge related to who gets access to investment opportunities in the first place.

Investor verification and eligibility checks now matter as much as trading access. So do allocation rules, ownership records, compliance controls, and settlement. Platforms that combine these functions in one clean workflow may earn an advantage as capital markets become more digital.

Implications For Capital Formation Platforms

Canada has already seen similar efforts to expand investor participation through equity crowdfunding, online exempt market platforms, private market technology, and digital investment platforms.

Canada already has a live comparison point. Wealthsimple’s IPO Access for Canadian retail investors broadens access through a brokerage account, while Bybit’s IPO Express adds a tokenized layer around allocation and trading. Both are aiming to solve the same pressure in capital markets: retail investors want earlier access, cleaner digital onboarding, and a fairer shot at high demand offerings.

NCFA’s Who Gets Capital As Funding Channels Multiply? asks the same core question for Canadian markets. More channels don't automatically create better access for every founder or investor.

Tokenized IPO access brings the same access and onboarding pressure to public exchange listings. For Canada, the practical question is whether regulated platforms can use digital infrastructure to make capital raising easier without weakening disclosure, custody, suitability, or investor protection. That question fits NCFA’s financial innovation market infrastructure research, where access to capital, tokenization, compliance, and investor trust now overlap.

Talking Point

If retail investors can access high demand offerings through faster digital channels elsewhere, how long can domestic platforms rely on slower, relationship driven distribution models?

The competitive advantage may no longer come from who controls the allocation. It may come from who makes access easiest while still meeting regulatory requirements.


NCFA Jan 2018 resizeThe National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org

NCFA Financial Innovation MapNCFA Innovation Opportunity BriefsNCFA Fintech Insights
NCFA Fintech WhispererNCFA Fintech Fridays PodcastNCFA Weekly Newsletter