Karsten Wenzlaff, Advisor
August 26th, 2025
June 16, 2025 | NCFA Resource | Risk Compliance And Regtech, Artificial Intelligence And Data, Regulation And Policy

On May 25, 2026, the International Organization of Securities Commissions (IOSCO) published its Supervisory Toolkit for Artificial Intelligence Use in Capital Markets. The report provides practical tools for regulators supervising AI systems used by market participants, exchanges, investment firms, and capital market infrastructure providers.
The toolkit arrives as AI goes beyond experimentation and into production environments across trading, surveillance, compliance, onboarding, fraud detection, customer service, research, risk management, and operational workflows. IOSCO focuses on the supervisory questions regulators need to ask rather than promoting a specific technology approach.
Stakeholder Input Opportunity: IOSCO is also seeking feedback related to the toolkit and AI supervision in capital markets. Interested regulators, market participants, technology providers, academics, and industry stakeholders can review the report and submit responses to IOSCO by this short survey by June 26, 2026.
The report organizes supervision around seven areas. These include governance and accountability, model development and testing, data quality and management, monitoring and controls, outsourcing and third party providers, market conduct risks, and operational resilience.
Rather than prescribing rules, IOSCO provides supervisory questions, review approaches, and practical considerations that regulators can use when assessing AI systems operating in capital markets. The toolkit is designed to support risk based supervision while remaining flexible as technologies evolve.
The report also recognizes that AI risks often emerge from combinations of factors rather than a single model failure. Poor quality data, weak governance, limited oversight, inadequate testing, vendor dependencies, and insufficient monitoring can interact in ways that create market, operational, or investor protection concerns.
Many financial institutions are already deploying AI in regulated environments. The challenge is no longer whether AI will be used. The challenge is whether firms can demonstrate appropriate governance, explainability, oversight, and accountability once those systems affect clients, markets, or investment decisions.
For fintech operators, the toolkit offers a useful preview of the questions regulators may increasingly ask during examinations, supervisory reviews, audits, and risk assessments. Firms that build governance and controls into deployment processes early may face fewer compliance and operational challenges as expectations mature.
This resource is useful for securities regulators, exchanges, investment dealers, fintech founders, regtech providers, compliance teams, AI governance specialists, risk managers, and market infrastructure operators.
It is especially relevant for organizations using AI in trading, surveillance, onboarding, fraud detection, compliance monitoring, client communications, investment research, portfolio management, or operational decision making.
The strength of the toolkit is its practical orientation. It extends beyond high level AI principles and focuses on supervision, controls, accountability, and operational implementation. The framework can be applied across a wide range of AI use cases and organizational structures.
It also provides a common language that regulators and industry participants can use when discussing AI oversight. That consistency becomes increasingly important as firms operate across multiple jurisdictions with different regulatory approaches.
The toolkit does not create binding rules or regulatory obligations. IOSCO's role is to provide guidance and supervisory tools that member jurisdictions can adapt to their own legal and regulatory frameworks.
IOSCO Supervisory Toolkit For AI Use In Capital Markets (primary resource)
IOSCO Media Release (official announcement)
AI Agents Enter Governed Financial Workflows (AI governance and oversight)
Customer Due Diligence Controls For Fintechs (controls, monitoring, and accountability)
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Jun 15, 2026

Image: Unsplash/Sasun Bughdaryan
More and more Canadians are no longer leaving the business of cross-border acquisitions to institutional investors, and they are increasingly relying on technology to simplify international purchases. Whether accessing real estate market data and analyses or taking a virtual walk through properties, the evolution of PropTech has significantly altered how investors can scout, assess, and acquire assets abroad.
The appeal is evident: Investors can browse neighborhoods, compare yields, and contact service providers from their own homes, without needing to travel. Technology has helped overcome many of the conventional barriers of purchasing overseas real estate.
However, technology is only one component of the equation, and the key to making the right decision still lies with a deeper understanding of the market and local expertise.
There are a number of things that make America attractive. Firstly is scale: you have thousands of cities, many with their own driving forces, their own pricing structure, and rental possibilities. Secondly, many areas in the US have an entry price point that is lower than in the large Canadian metro cities; diversified investors can find regions that offer higher cash flow potential and a wider array of inventory to choose from.
Thirdly is the diversity of the economies, so in one city there could be employment growth from the medical field, another from technology, and another from tourism: these provide diversification across sectors, reducing concentration of risk.
Fourth is movement of currency; at various times favorable exchange rates can make buying opportunistic in US real estate and encourage purchasing. Fifth and perhaps most importantly, many investors recognize US property for long-term wealth accumulation as well as supplementing their existing real estate holdings in Canada.
PropTech has dramatically changed the way that investing is performed. Researching a foreign market used to involve many trips and scarce data points.
Digital platforms now allow immediate viewing of market statistics, population reports, rental data, and transaction records. This allows investors to view options from home and pre-qualify their search before proceeding. AI allows investors to take advantage of predictors that indicate growing jobs, rental rates, and infrastructure developments. Electronic document systems further streamline transaction processes by allowing contracts, disclosures, and loan documents to be viewed and electronically signed.
Virtual property tours enhance accessibility and allow buyers to view a property and area without actually going there. PropTech has given Canadians an experience with investing in American property that can now be performed more quickly and knowledgeably than ever before.

Image: Unsplash/Jakub Żerdzicki
Property intelligence – Data is quickly becoming one of real estate’s most prized assets. Canadian buyers are reviewing population migration trends, job numbers, school scores, and investment in infrastructure before choosing where to buy. There are fewer assumptions and more calculations involved. Rental performance indicators offer data to gauge anticipated occupancies, average rents, and overall income for a property.
Many also follow the number of building permits issued as a predictor of market confidence or for the impact that a build may have on supply. Statistics surrounding migration give further data points for regions experiencing an influx from those new to the workforce or in retirement.
News about business expansion, road improvements, or the number of crimes are all part of the picture. This approach eliminates the assumptions—there's a data-driven reason to consider some markets over others before other investors catch on.
We have a powerful arsenal of technology. Technology alone will not replace ground-level knowledge, though. As Jeff Tricoli, the prominent Southeast Florida real estate broker, puts it:
"I believe real estate is built on clarity, trust, and education. We guide clients with market insight. So every decision is informed and not speculative in manner."
However, technology cannot solve all issues. Cross-border taxation, for instance, is still a thorny subject. Investors need to be able to familiarize themselves with disclosure rules, ownership, and potential liability in two different countries.
Financing can also be tricky. Banks lend at different rates and have different criteria, and one might not be able to get good terms without more extensive paperwork. The law varies by state. Each has its own set of laws regarding what a landlord may and may not do, how to evict, and what must be disclosed to the tenant. Another problem has to do with interpreting data. The internet can flood you with information, but if you don’t interpret it correctly, you may end up making a mistake.
The market is another quick-changing variable. One that appears robust today might not be tomorrow if some new economic trend or government action destabilizes it. Ultimately, human acumen is still important. Networks of local experts—lawyers, accountants, brokers, and the like—still matter for a successful deal. Technology, in the absence of it, is certainly not a replacement for diligent investigation.
It is also reasonable to assume that PropTech will continue to evolve and exert influence. The predictive capabilities of artificial intelligence could be enhanced in such a way that investors know which neighborhoods will perform best. They will also happen to be the neighborhoods that will be in most demand in the future.
The use of blockchain will undoubtedly streamline transactions, as well as increase security with records. It is likely that data will also be more thoroughly integrated. Investors could be provided with a suite of not only market analysis tools but also financing, legal advice, and property management information.
Interest from Canadians remains strong because the United States offers size, variety, and scope for portfolio growth.
Proptech has changed the way investors look at cross-border transactions. Data analytics, virtual tours, prediction technology, and online platforms allow for easy research and access to investments.
However, tech is not a total substitute for local experience and knowledge. Legal, tax, financing, and neighborhood issues require local input. Hope this read helped you and best of luck on your journey in this way.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
June 10, 2026 | NCFA Story Intelligence | Capital Markets And Funding

On June 8, 2026, OpenAI confirmed it submitted a confidential S-1 to the U.S. Securities and Exchange Commission. One week earlier, Anthropic disclosed its own confidential draft registration statement for a proposed IPO.
The filings are the trigger, not the story. The story is how frontier AI moves from research labs and safety debates into consumer adoption, cloud alliances, investor conviction, copyright fights, government interest, near trillion dollar private valuations, and the public market gate.
OpenAI starts with a promise that sounds almost incompatible with public markets.1 In 2015, it begins as a nonprofit AI research company with a mission tied to broad public benefit, not shareholder return. That tension does not matter much while the work sits inside research circles. It matters once OpenAI becomes strategically important.
Anthropic comes from inside the same argument.2 Founded in 2021 by former OpenAI researchers, including Dario Amodei, Anthropic builds its identity around reliable, interpretable, and steerable AI systems. It is not just another model company. It is a different answer to a question OpenAI helped make unavoidable.
ChatGPT turns frontier AI into a public habit.3 The late 2022 launch changes the audience almost overnight. Students, founders, developers, workers, executives, and investors start testing advanced AI directly. Reuters later reports ChatGPT reached an estimated 100 million monthly active users in January 2023.4
Claude takes the quieter enterprise path.5 It does not create the same consumer spectacle, but Anthropic leans into reliability, predictable deployment, and safety as commercial positioning. Trust becomes part of the product, especially for organizations that need governance controls before they scale AI usage.
Microsoft turns OpenAI into one of the largest strategic bets in technology.6 The relationship gives OpenAI more than capital. Azure becomes part of its operating foundation, with cloud infrastructure, enterprise distribution, and credibility arriving at a moment when many buyers are still trying to understand what generative AI can become.
Anthropic attracts a different group of believers. Google backs the company. Amazon commits billions and makes Anthropic central to its AI strategy, while AWS becomes Anthropic's primary cloud and training partner.7 Spark Capital and Menlo Ventures remain part of the journey as Anthropic grows from safety focused startup into one of OpenAI's strongest challengers.
OpenAI remains the company everyone else measures against. ChatGPT gives OpenAI distribution, developer attention, and brand recognition. Microsoft's partnership gives it reach into enterprise software. That combination makes OpenAI powerful, but it also makes dependency risk more visible for large buyers.
Anthropic becomes strategically useful because it is different. Claude's role in enterprise productivity and financial workflows shows how a trust first product can become a real alternative. When Microsoft brings Claude into Office productivity, the message is practical: even OpenAI's most important partner wants more than one AI supplier in the stack.
OpenAI's success creates a new constraint. The company is no longer trying to prove that people will use frontier AI. ChatGPT already answered that question. OpenAI now has to fund the compute, deployment, developer usage, and enterprise adoption needed to keep the flywheel turning.
Anthropic faces the same pressure through Claude demand. Its Series H announcement points to global enterprise adoption, expanded compute capacity, Amazon, Google, Broadcom, SpaceX, and chip partners including Micron, Samsung, and SK hynix.8 The company's careful brand does not reduce its need for industrial scale infrastructure.
OpenAI's rise brings copyright and publisher pressure with it. The more useful the models become, the more valuable the training inputs appear. News organizations, authors, artists, and creators increasingly ask how their work contributes to model capability and who captures the value created from it.
Anthropic faces the same ownership question through Reddit. The Reddit lawsuit against Anthropic puts training data claims, platform rights, and AI accountability into the story. The issue is not only whether AI can learn from the web. It is who gets a say when web content becomes commercial fuel.
OpenAI's control questions become public in 2023.9 The board removes Sam Altman, then reverses course after pressure from employees, customers, investors, and partners. The episode is brief, but it changes how people read the company. Governance becomes part of valuation risk.
Anthropic's safety stance faces real world tests. Its product identity is tied to reliability and responsible deployment, but governments, enterprises, and defence buyers want more capability. The tension between safety commitments and state power is already visible in AI ethics, state power, and red lines.
OpenAI's March 2026 financing makes the capital story impossible to ignore.10 The company closes $122B USD in committed capital at an $852B USD post money valuation. The round is anchored by Amazon, NVIDIA, and SoftBank, with continued participation from Microsoft. SoftBank co leads alongside a16z, D. E. Shaw Ventures, MGX, TPG, and accounts advised by T. Rowe Price Associates.
Anthropic's May 2026 Series H shows the same private market scale.11 The company raises $65B USD at a $965B USD post money valuation. Altimeter Capital, Dragoneer, Greenoaks, and Sequoia Capital lead the round, with Capital Group, Coatue, D1 Capital Partners, GIC, ICONIQ, and XN also co leading. Amazon's prior commitment remains part of the picture, along with Google, Broadcom, SpaceX, and chip partners.
OpenAI follows on June 8 and keeps timing open.12 The company confirms it submitted a confidential S-1 but says it has not decided when to go public. Public markets become an option, while OpenAI keeps weighing what may be easier to do as a private company.
Anthropic reaches the IPO gate first on June 1.13 The filing does not set share count or price. It gives the company the option to move after SEC review, market conditions, and other factors.
Different origins. Different philosophies. Different investor groups. Different commercialization paths. Yet both companies arrive at the same gate.
The IPO filings don't end the frontier AI story. They mark the point where a decade of research, product adoption, infrastructure buildout, governance conflict, investor conviction, and public policy pressure begins meeting public markets.
For NCFA, this is where Story Intelligence connects to the Financial Innovation Map. The opportunity set includes private market liquidity, tokenized pre IPO access, AI infrastructure finance, prediction markets around IPO timing and valuation, disclosure standards, and investor protection for companies that may become public only after private markets have already priced much of the upside.
OpenAI and Anthropic followed different paths, attracted different allies, and made different decisions along the way. Yet both arrived at the same gate. That may say as much about the economics of frontier AI as it does about the companies themselves.
What part of the story stood out most to you?
Share this story → Explore related intelligence → Subscribe
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Jun 9, 2026

Going public puts every control your fintech owns or outsources under a microscope. Auditors, regulators, and future shareholders want hard evidence that third-party weak spots cannot derail your debut.
Roughly 30% of breaches trace back to external suppliers, and each incident costs an average $4.44 million, according to IBM's 2024 Cost of a Data Breach Report. Advisers preparing S-1 filings increasingly want a repeatable way to assess outside cyber risk before the SEC asks, and investors read disciplined third-party oversight as a proxy for operational maturity.
Here is the catch: your SOC 2 program alone will not clear the public-company bar. SOC 2 demonstrates protection of customer data, while SOX 404 focuses on financial-reporting integrity. A purpose-built vendor-risk platform bridges that gap by connecting vendor security evidence to the controls auditors expect in an IPO cycle. We ranked five platforms on the criteria that matter most for IPO prep: compliance fit, automation depth, auditor acceptance, and cost-to-value.
We started with fifteen tools from analyst waves, forums, and twenty competitor write-ups, then removed anything lacking a purpose-built vendor-risk module or fintech case study, leaving five contenders. We scored each on a 100-point scale across four questions:
Two CISOs who took fintechs to market last year reviewed the weighting, confirming it reflects where auditors press hardest.

Vanta folds vendor oversight into the same dashboard you use for SOC 2, helping teams remediate risk up to 45% faster. VRM, compliance automation, Trust Center, and SOX ITGC live in one system with shared evidence and cross-framework mapping.
Verdict: best fit if your IPO plan needs one platform to run SOC 2, stand up SOX ITGC, and operationalize vendor oversight. If you need managed analyst services or board-ready vendor portfolio reporting, compare TPRM-specialized options.

Optro rebranded from AuditBoard in March 2026. It keeps the same product family public-company SOX teams know: SOXHUB (SOX program management), CrossComply (multi-framework compliance), and a connected TPRM module. More than half of the Fortune 500 use it, and it is one of the most common SOX systems Big Four auditors are comfortable testing.
Verdict: choose Optro if full SOX 404 depth (ITGC plus financial process controls) and audit-firm fluency top your list. For SOC 2 day-to-day, a Trust Center, and AI-compressed vendor reviews, you will likely pair it with another platform.

OneTrust grew from privacy management into a broad GRC suite with a substantive third-party risk module, serving 14,000+ customers across regulated industries. It fits when vendor oversight has to live next to privacy, ethics, and ESG in one control fabric.
Verdict: right when vendor risk must sit alongside privacy, ethics, and ESG in one enterprise fabric and you can absorb a longer rollout. To consolidate SOC 2, SOX ITGC, and AI-assisted reviews into one fast-moving platform, OneTrust typically needs pairing.

Prevalent is a pure-play TPRM platform with more than two decades of specialization, acquired by Mitratech in October 2024 and rated a Strong Performer in Forrester's Third-Party Risk Management Wave (Q1 2026). It is the heavyweight option when vendor risk itself is the program.
Verdict: choose Prevalent for bank-style TPRM depth, broad regulatory mapping, and multi-domain continuous monitoring. To collapse SOC 2, SOX ITGC, and vendor oversight into one platform, expect to add complementary tools.

Venminder is a TPRM platform for regulated financial-services teams that want to outsource a share of vendor due diligence. It pairs software with managed services where certified analysts review vendor materials and deliver risk-rated outputs. Venminder was acquired by Ncontracts in September 2024 (Hg Capital-backed); it has 1,200+ customers, and the combined entity serves 5,000+.
Verdict: strong when capacity and expertise are the constraint and you want platform-plus-analysts diligence with contract oversight. To consolidate SOC 2 evidence, SOX ITGC, and VRM into one system, Venminder adds tool sprawl rather than reducing it.
In most fintechs, SOC 2 lives with Security and SOX 404 with Finance, and your vendors sit in the overlap. Treat them as two programs and you get two inventories and two sets of audit questions that never reconcile. Build one vendor register that serves both audits instead.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
June 8, 2026 | NCFA Market Activity | Artificial Intelligence And Data, Risk Compliance And Regtech

On June 8, 2026, Ottawa based MindBridge expands its AI audit and assurance platform to help audit teams review larger transaction populations and assess risk faster. The update adds full population analysis, subledger analysis, a Monetary Flow Dashboard, transaction level risk assessment, duplicate transaction controls, and large file processing.
MindBridge says KPMG deploys its platform through a global audit platform used in more than 60 countries. The company also points to recent partnerships with BDO and Buzzacott.
Sarah McGinnity, General Manager, Audit & Assurance Solutions at MindBridge:
“Audit and assurance teams are being asked to oversee larger transaction populations, more complex systems, and increasingly automated financial processes without adding proportional time or resources.”
The most important part of the announcement is the focus on full population analysis.
Audit teams have traditionally relied on sampling. AI driven software now makes it possible to review entire transaction populations and identify unusual activity across much larger data sets. That can help auditors spend less time searching for issues and more time investigating the transactions that matter.
MindBridge is positioning its platform around that shift. The latest release gives users more visibility into transaction flows, subledger activity, and risk indicators across financial records.
Many AI products compete on productivity. MindBridge competes on audit quality, risk assessment, and financial controls.
It alters the buying decision. Audit firms, finance teams, and regulated organizations already need oversight, documentation, and evidence. They aren't looking for experimentation. They're looking for better ways to review growing volumes of financial data.
The trend extends beyond audit. Financial institutions are adopting AI in compliance, fraud detection, transaction monitoring, and operational risk. As NCFA noted in its coverage of regulated AI controls and governance, buyers increasingly want systems that support human judgment and provide a clear record of how decisions are made.
If audit software can test full transaction populations instead of samples, the value changes from finding anomalies after the fact to proving where financial risk may occur before judgment calls are made. That's where AI audit tools become useful to CFOs, auditors, and regulators: not as automation, but as evidence infrastructure.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |