Karsten Wenzlaff, Advisor
August 26th, 2025
July 13, 2026 | NCFA Market Activity | Cybersecurity And Fraud, Artificial Intelligence And Data, Banking And Credit

On June 25, 2026, Jack Henry expanded its Google Cloud collaboration to develop agentic AI security for banks and credit unions. The U.S. banking technology provider serves about 7,400 community financial institutions and plans to combine Google Security Operations, Gemini Enterprise Agent Platform, and Mandiant Consulting across Google Cloud, other cloud services, and on-premises systems.
The deal is less about access to an advanced model than the work required to deploy one inside a bank. Security evidence is spread across user accounts, devices, applications, networks, and cloud services. Analysts must connect those records quickly enough to determine whether an alert is harmless or part of an attack. Smaller institutions often lack the security teams and integration capacity to do that across several enterprise products.
The divide and conquer commercial logic of the deal is Google brings the models, security software, and threat expertise. While Jack Henry brings the bank relationships and operating knowledge required to put them to work.
Google Security Operations collects security data from across an institution’s systems and connects related alerts into an investigation. Its Triage and Investigation Agent can retrieve evidence, apply threat intelligence, assess likely causes, and explain its findings.
Google says the agent has processed more than five million alerts and reduced a typical 30-minute manual investigation to about 60 seconds. Those are Google product results, not outcomes reported by Jack Henry customers.
The operating gain comes from completing the early investigation before an analyst steps in. Instead of opening several products, finding related records, and rebuilding the sequence of events, the analyst receives an assembled case with supporting evidence and a proposed response.
Sensitive actions still require clear limits and human oversight. Google can pair AI investigations with fixed playbooks and require approval before isolating a device, disabling an account, or blocking traffic. Jack Henry hasn’t said where it will draw those boundaries, how customers will audit agent decisions, or what happens when an automated recommendation is wrong.
Release timing, pricing, implementation requirements, and the first participating institutions also remain undisclosed, so the announcement is good on tech direction but light on adoption or performance figures inside an operating bank.
Mandiant Consulting adds threat modelling, security assessments, and red team testing. That work tests the design before attackers do. Gemini handles reasoning, while Google Security Operations provides the data and investigation tools.
Jack Henry must make the combined service fit each institution’s systems, controls, and support model. That integration is the difficult part.
A bank could buy Google’s security products directly. It would still need to connect the right data, define agent permissions, build response procedures, satisfy audit requirements, and decide who remains accountable for each action.
Jack Henry already operates inside that environment. Its core processing, digital banking, payments, lending, and operational products support institutions that rarely replace critical systems. It also manages hosted and on-premises deployments that a cloud provider may not control.
The companies began working together in 2022 on cloud data, reporting, and integration services. Security extends that relationship into a product Jack Henry can configure around each customer and deliver through an existing technology and support contract.
That could make AI security another banking software service rather than a separate enterprise purchase. Core providers already control the connections, implementation work, and customer access needed to distribute agents at scale.
Security specialists still compete on detection quality, threat intelligence, and response tools. CrowdStrike and Palo Alto Networks are adding agents to their products, while Fiserv offers managed cybersecurity services and is developing AI capabilities. Jack Henry competes from a different position. Its advantage is knowing how community institutions run and where security tools must connect.
Google gains a route into thousands of regulated institutions without implementing its products one bank at a time. Jack Henry can add a service whose value depends on its knowledge of each customer’s systems and operating requirements.
This is where enterprise AI economics become clearer. Foundation models can be sourced from a small group of large providers. The commercial asset is access to the workflow where the model can complete useful work under controlled permissions.
That favours software companies with deep customer integration. Fintech founders don’t need to build a foundation model, but a general AI interface won’t be enough. TD’s AI loan decisioning deployment shows why the value comes from placing verification and decision tools inside an active lending workflow. A specialized process, regulated decision, proprietary dataset, or difficult integration gives an agent work that an incumbent can’t easily reproduce.
Jack Henry hasn’t announced a Canadian release, but the deployment problem is familiar. Canadian regulated AI workshops have identified vendor dependence, data quality, model validation, and accountability as barriers to production use.
Access to a capable model isn’t the constraint. Banks need to connect it to existing systems without losing control of data, permissions, decisions, or operational risk. National Bank’s Sardine deployment follows that reality by embedding external device intelligence and risk scoring into retail, commercial, and wealth operations.
The Canada AI Consortium is working on common controls for models, agents, users, and enterprise systems. Its use cases differ from Jack Henry’s security project, but the operating requirement is the same: agents need restricted access, visible decisions, and accountable people.
For Canadian banks and fintechs, the commercial challenge is solving those controls inside regulated workflows. Products that leave the integration and governance work to the bank may struggle to progress beyond a pilot.
As foundation models become easier to replace, will banking software competition depend less on who owns the AI and more on who controls the workflows where agents can act?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Payments Canada says Canada’s Real-Time Rail (RTR) By-law and Rules received all necessary approvals on June 30, 2026, take effect August 24, 2026, and support a planned Q4 2026 launch. RTR is Canada’s new real-time exchange, clearing and settlement system for instant, data-rich payments.
The approved Rules establish participant roles and the legal operating framework, but they do not provide automatic access. PSP participation can also require RPAA registration where applicable, Payments Canada membership, a direct or agent settlement model, ISO 20022 integration, centralized fraud services, testing, certification and continuous operations.
Coverage includes the RTR By-law, RTR Rules, public policies, PSP participation pathways, direct and indirect settlement, centralized fraud controls, ISO 20022, payment finality, testing, phased launch and the capabilities the framework can support.
Use this Regulatory Intelligence page to understand what is now approved, identify the operating path that fits your role, follow the dependencies behind each capability and open the official documents needed for implementation.
RTR is the result of a decade-long modernization effort, not a 2024 initiative. The journey includes early design work, vendor selection, missed launch targets, a 2023 delay acknowledgement, a 2024 program restart, legal consultation, rule approval and the current transition toward production.
This is the overview readers need before entering the detailed framework. It separates the changes now settled in the approved legal framework from the implementation work that still determines who can participate, how they connect and what they can offer.
The By-law and Rules establish the formal basis for payment-message exchange, clearing, settlement, participant roles, compliance, recourse and system operation. Implication: planning can proceed against approved rules rather than draft policy.
Canadian Payments Act changes and RPAA registration allow eligible PSPs to seek Payments Canada membership and RTR participation. Implication: eligibility opens the route; it does not grant automatic membership, direct settlement or production access.
Organizations may pursue direct settlement, use a settlement agent, build customer products through an RTR participant or provide connectivity and software services. Implication: control, cost, time and continuing obligations differ materially by pathway.
Direct settlement requires a Bank of Canada RTR settlement account; other participants may rely on a settlement agent. Implication: liquidity, funding, contracts, resilience and operating responsibility change with the settlement model.
Confirmation of Payee, Central Fraud Analytics, the Central Risk List and Central Fraud Reporting complement participant controls. Implication: firms must integrate, contribute data, make documented decisions and support continuous fraud operations.
Technical specifications, ISO 20022 mapping, security, testing, certification, operational readiness and 24/7 support remain production gates. Implication: time and cost now shift from rule uncertainty to execution readiness.
Choose the role you want to play, confirm whether RPAA registration applies, and map the Payments Canada membership, settlement, fraud, testing and 24/7 operating work that follows.
Start with the customer result you want to deliver. Then compare direct participation with partner, software, connectivity or managed settlement routes before committing to the highest-cost model.
Rule approval removes one source of uncertainty. The next signals are participant approvals, settlement agreements, certification, pricing, product launches, customer adoption and fraud performance.
Select any item to see what it requires, what it enables and where to go next. Follow the highlighted connections from legal authority and operating rules into participation, controls, customer use cases and infrastructure opportunities. For product nodes, the right panel also points to the numbered shared-rail functions shown directly below this map.
Select the role closest to the operating model being considered. The pathway below shows the sequence of gates, the regulatory and operating work that increases cost or time, what the route unlocks and where a lighter model may be available.
Move from the RTR rules into the distinct regulatory, implementation, competition and innovation questions that affect market entry and commercial deployment.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Jul 10, 2026 | NCFA Resource | Payments And Money Movement, Regulation And Policy, Risk Compliance And Regtech

Canada’s Real-Time Rail is Payments Canada’s new exchange, clearing and settlement system for instant, data rich payments. Its approved By-law and Rules establish the legal and operating framework for PSP access, participation, settlement, fraud controls, ISO 20022 implementation, testing and the planned Q4 2026 launch.
On July 10, 2026, NCFA published a Real-Time Rail Rules and Access Intelligence Guide that brings the requirements, participation routes and operating considerations into one practical reference.
The guide covers the RTR By-law and Rules, Payments Canada membership, PSP access, direct and indirect settlement, Bank of Canada settlement accounts, centralized fraud controls, technical integration, payment finality, operational readiness and the products and services the rail could support.
The resource helps readers separate what has been approved from the work still required before an organization can participate in the RTR or launch a product using it.
Legal eligibility does not create automatic access. Depending on the operating model, a firm may still need RPAA registration, Payments Canada membership, a direct or agent settlement arrangement, ISO 20022 integration, fraud service connectivity, security controls, testing, certification and continuous operations.
The guide also compares different routes into the market. Organizations may pursue direct settlement, work through a settlement agent, develop customer products through an RTR participant or provide software, connectivity, fraud, testing and managed access services.
This resource is useful for payment service providers, banks, credit unions, fintech founders, infrastructure providers, fraud and identity firms, compliance teams, investors, policymakers and organizations assessing real time payment products.
It is especially useful for teams working through access, settlement, liquidity, fraud controls, ISO 20022, testing, certification, payment initiation, pay by bank, treasury, reconciliation and embedded payment models.
The strength of this resource is that it brings Canada’s RTR rules, access requirements, settlement choices, fraud services and implementation dependencies into one working reference. It also explains how real time payments connect with consumer driven banking, data portability and the next generation of digital financial services.
The guide can also help firms choose a realistic operating role before committing to the cost and continuing obligations of direct participation. Direct settlement provides more control, while partner, software, connectivity and managed settlement models may offer a more practical route to market.
The limit is that approval of the By-law and Rules does not complete implementation. Technical specifications, participant onboarding, commercial agreements, testing, certification, pricing, product launches, customer adoption and fraud performance will continue to develop.
Readers should use the guide for ecosystem intelligence and planning, not as legal, financial, investment, compliance or professional advice.
Canada Real-Time Rail Rules And Access (primary NCFA Regulatory Intelligence page)
PSP Registration With The Bank Of Canada (RPAA registration and supervision)
Open Banking In Canada Opportunity Brief (payment initiation and open finance opportunities)
RTR By-law And Rules Approval (official Payments Canada update)
Payments Canada Real-Time Rail (official system hub)
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
July 10, 2026

Financial technology organizations are often able to grow - employing staff from different countries - these companies use international recruitment to address high workloads, find highly trained employees and enter new geographical areas. Many professionals, like software engineers, data researchers and client service experts, prefer roles that allow them to work from any location. While these hiring practices are beneficial, businesses are responsible for managing the specific challenges involved.
Worker classification is a primary factor for companies to manage when they hire across borders. Organizations that identify their staff correctly are able to prevent legal disputes and avoid the loss of money. Businesses that operate in multiple countries have fewer administrative tasks when they clearly define the legal status of their international workers.
Worker classification is the process where an organization determines if a person is an employee or an independent contractor. Companies are required to follow specific guidelines to establish the legal status of their workers. Government agencies and courts evaluate the degree of control an employer has and how much independence a worker maintains to make this decision. Please be aware that the label a company gives to a worker is not the only factor that determines their status.
This consideration is particularly important for companies that staff internationally. The status of a worker who provides services from abroad can change depending on the country where they originate. As such, businesses should understand the implications of classifying employees as independent contractors outside their jurisdiction.
Businesses can suffer adverse financial and legal consequences from misclassifying workers. For instance, companies may incur substantial expenses by following court orders mandating retroactive payments of payroll taxes, overtime, and social benefits. In addition, businesses must consider litigation costs in any resulting disputes over misclassification.
Companies that hire internationally must navigate complex legal frameworks when classifying their workers. Most jurisdictions allow businesses to employ independent contractors on either a full-time or part-time basis. However, certain countries require organizations to treat such workers like employees. It can be challenging to ensure that employment terms abide by all applicable statutory requirements in different jurisdictions. As such, companies may find themselves facing adverse consequences when trying to establish long-term contracts for workers based abroad. To mitigate these risks, businesses turn to local attorneys and a Toronto Employment Lawyer to understand the implications before hiring.
How a company classifies its workers influences how the business functions. Management must recognize the administrative tasks and legal requirements that apply to different categories of workers - these arrangements are important because they change how the company processes payroll, manages benefits plus protects private data. Leaders are able to use this information to plan their workforce and lower the risk of legal disputes.
The status of a worker is what defines their specific legal rights but also responsibilities. Individuals who are employees are usually eligible for more protections and company provided benefits than those who are independent contractors. If a company understands these distinctions, it is able to follow the law as well as maintain a consistent hiring process - this knowledge is necessary for organizations that intend to grow in multiple countries and use the specific abilities of their staff effectively.
The financial technology industry is subject to many regulations. Companies are required to dedicate time and money to follow laws regarding data privacy, security for digital information plus financial reporting. This commitment to compliance is also necessary when businesses hire staff. Classification of workers is an important process because these organizations manage private data and perform money transfers for customers. Organizations that hire people in other countries are encouraged to monitor legal changes but also speak with an employment lawyer. Audits are a helpful tool to identify problems and lower risks before a company hires remote employees.
Fintech companies often find benefits in hiring employees from other countries - this approach allows businesses to grow and find qualified workers in a larger market. All staff members must follow the same professional requirements regardless of their location. Management teams are responsible for creating clear rules for international hiring to keep processes uniform and minimize potential problems.
Rules change depending on the country - businesses are more successful when they monitor legal updates. A detailed plan for following laws is necessary because international employment is complex - these strategies are also important for keeping the trust of investors and protecting the public image of the company.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
July 9, 2026 | NCFA Market Activity | Fintech AI/ML, Data-driven, Automation, Generative AI, Enterprise, Scaleup, Fintech And Innovation

Wealth firms can’t automate revenue operations if the upstream data that's feeding billing, advisor compensation and reporting still needs manual repair.
On July 8, 2026, Toronto based PureFacts announced a strategic partnership with WealthTechs to launch new data aggregation and ingestion capability for wealth and asset management firms.
PureFacts will license and embed WealthTechs’ data aggregation and connectivity technology into its platform. The company will use the technology to connect, normalize and validate data before it enters revenue workflows.
Those workflows are high stakes. PureFacts supports fee billing, advisor compensation, practice management and revenue intelligence.
Robert Madej, Founder and CEO of PureFacts, said:
"This partnership with WealthTechs marks an important step forward in our mission to empower wealth firms with a trusted data foundation."
Wealth management has a data plumbing problem inside revenue operations.
Account records, transactions, portfolio data, fee schedules, householding rules and advisor relationships often come from different systems. The business still has to turn that data into client fees, advisor compensation, reporting and management insight.
PureFacts describes its platform as Revenue Performance Management software. Its product set includes fees and billing, advisor compensation, practice management and revenue book of record. WealthTechs brings an ingestion layer that turns source data into usable operating data.
Revenue, compensation and compliance teams all depend on the same underlying data. If that data is inconsistent, every workflow downstream inherits the problem.
PureFacts says the partnership supports future agentic AI capability, but the initial work starts with cleaner data.
Data has to be connected before it can be used. It has to be normalized before it can be compared. It has to be validated before a firm can trust automation inside billing, compensation or advisor operations.
The same requirement is emerging across wealth management. See: FutureVault Ships Agentic Document Intelligence For Advisors.
Agentic AI is even riskier since it may initiate a workflow, recommend an action or help resolve an exception. In wealth operations, that means the data layer needs controls, auditability and clear ownership before automation scales.
The partnership gives PureFacts a deeper data ingestion capability for revenue operations. Not AI as a headline. AI as the downstream beneficiary of cleaner enterprise data.
Can wealth firms deploy agentic AI in revenue operations before they solve data aggregation, normalization and validation?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |