Karsten Wenzlaff, Advisor
August 26th, 2025
July 14, 2026

Canadian regulatory debates tend to focus on payments, open banking and digital assets. Online gambling rarely gets the same attention from the fintech community, yet Ontario's decision to open a regulated iGaming market in April 2022 stands as one of the more instructive regulatory experiments this country has run in recent years. It shows how a province can bring a large grey-market industry under domestic supervision without banning anything and without building the whole system in-house.
Under the Criminal Code, gambling in Canada is lawful only when a province conducts and manages it. For decades that phrase was read narrowly: provincial lottery corporations ran their own sites, and everything else operated offshore. Canadians could gamble on hundreds of internationally licensed platforms, but none of those sites answered to a Canadian regulator, paid Canadian taxes or followed Canadian consumer-protection rules.
Ontario's answer was structural rather than prohibitive. The province created iGaming Ontario, working alongside the Alcohol and Gaming Commission of Ontario (AGCO), and invited private operators to sign operating agreements with it. On paper, the province still conducts and manages the market, satisfying the Criminal Code. In practice, private brands compete within a supervised commercial environment. It is a workaround, but a deliberate and legally considered one, and so far it has held.
The model rests on a division of labour. AGCO acts as the regulator: it registers operators and gaming suppliers, sets standards and enforces them. iGaming Ontario handles the commercial side, including the operating agreements and the revenue-sharing arrangements that return a portion of gaming revenue to the province.
The standards themselves reach further than many observers expected. Operators must have their games independently tested for fairness, run anti-money-laundering controls, verify the age and identity of every customer, and report data to the regulator. Advertising is constrained too: AGCO later tightened its rules on marketing that could appeal to minors, including the use of athletes and celebrities. Operators that stay outside the system lose the ability to advertise legally in the province, which has proven a meaningful commercial incentive to register.
For consumers, the practical differences are easy to overlook because a regulated site looks much like an unregulated one. The protections sit underneath. Players on Ontario-registered platforms must be 19 or older and verified as such. They get enforceable complaint pathways, mandatory tools for setting deposit limits, and access to a centralized self-exclusion program that works across all registered operators rather than one site at a time.
Transparency has improved as well. Independent directories such as Canadian Online Casinos now document which operators hold registrations and on what terms, making it easier for a player to check a site's status before creating an account. That kind of third-party reference layer barely existed when the market was entirely offshore. None of this removes the risks of gambling, and the regulated model treats it accordingly: operators are required to present gambling as entertainment, encourage limit-setting and point players toward support services.
Other provinces are watching, and Alberta has already passed legislation to build a comparable market. Ontario's experience offers a few transferable lessons. First, players migrate to regulated sites when the legal offer is genuinely competitive; a restrictive market that pushes people back offshore defeats the purpose. Second, separating the regulator from the commercial entity avoids the conflict of interest that arises when one body both profits from gambling and polices it. Third, advertising guardrails are easier to set at launch than to retrofit after public complaints.
There are open questions too. Self-exclusion registries remain provincial, so a player barred in Ontario can still sign up elsewhere, and the long-term effect of regulated markets on problem-gambling rates will take years of honest measurement to establish.
For an association focused on financial innovation, the interest here is less about gambling than about method. Ontario took a digital industry that regulation had failed to reach, found a lawful structure to house it, and paired market access with enforceable standards. That template will look familiar to anyone following the open-banking file, and it deserves study for the same reasons.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
July 13, 2026 | NCFA Market Activity | Cybersecurity And Fraud, Artificial Intelligence And Data, Banking And Credit

On June 25, 2026, Jack Henry expanded its Google Cloud collaboration to develop agentic AI security for banks and credit unions. The U.S. banking technology provider serves about 7,400 community financial institutions and plans to combine Google Security Operations, Gemini Enterprise Agent Platform, and Mandiant Consulting across Google Cloud, other cloud services, and on-premises systems.
The deal is less about access to an advanced model than the work required to deploy one inside a bank. Security evidence is spread across user accounts, devices, applications, networks, and cloud services. Analysts must connect those records quickly enough to determine whether an alert is harmless or part of an attack. Smaller institutions often lack the security teams and integration capacity to do that across several enterprise products.
The divide and conquer commercial logic of the deal is Google brings the models, security software, and threat expertise. While Jack Henry brings the bank relationships and operating knowledge required to put them to work.
Google Security Operations collects security data from across an institution’s systems and connects related alerts into an investigation. Its Triage and Investigation Agent can retrieve evidence, apply threat intelligence, assess likely causes, and explain its findings.
Google says the agent has processed more than five million alerts and reduced a typical 30-minute manual investigation to about 60 seconds. Those are Google product results, not outcomes reported by Jack Henry customers.
The operating gain comes from completing the early investigation before an analyst steps in. Instead of opening several products, finding related records, and rebuilding the sequence of events, the analyst receives an assembled case with supporting evidence and a proposed response.
Sensitive actions still require clear limits and human oversight. Google can pair AI investigations with fixed playbooks and require approval before isolating a device, disabling an account, or blocking traffic. Jack Henry hasn’t said where it will draw those boundaries, how customers will audit agent decisions, or what happens when an automated recommendation is wrong.
Release timing, pricing, implementation requirements, and the first participating institutions also remain undisclosed, so the announcement is good on tech direction but light on adoption or performance figures inside an operating bank.
Mandiant Consulting adds threat modelling, security assessments, and red team testing. That work tests the design before attackers do. Gemini handles reasoning, while Google Security Operations provides the data and investigation tools.
Jack Henry must make the combined service fit each institution’s systems, controls, and support model. That integration is the difficult part.
A bank could buy Google’s security products directly. It would still need to connect the right data, define agent permissions, build response procedures, satisfy audit requirements, and decide who remains accountable for each action.
Jack Henry already operates inside that environment. Its core processing, digital banking, payments, lending, and operational products support institutions that rarely replace critical systems. It also manages hosted and on-premises deployments that a cloud provider may not control.
The companies began working together in 2022 on cloud data, reporting, and integration services. Security extends that relationship into a product Jack Henry can configure around each customer and deliver through an existing technology and support contract.
That could make AI security another banking software service rather than a separate enterprise purchase. Core providers already control the connections, implementation work, and customer access needed to distribute agents at scale.
Security specialists still compete on detection quality, threat intelligence, and response tools. CrowdStrike and Palo Alto Networks are adding agents to their products, while Fiserv offers managed cybersecurity services and is developing AI capabilities. Jack Henry competes from a different position. Its advantage is knowing how community institutions run and where security tools must connect.
Google gains a route into thousands of regulated institutions without implementing its products one bank at a time. Jack Henry can add a service whose value depends on its knowledge of each customer’s systems and operating requirements.
This is where enterprise AI economics become clearer. Foundation models can be sourced from a small group of large providers. The commercial asset is access to the workflow where the model can complete useful work under controlled permissions.
That favours software companies with deep customer integration. Fintech founders don’t need to build a foundation model, but a general AI interface won’t be enough. TD’s AI loan decisioning deployment shows why the value comes from placing verification and decision tools inside an active lending workflow. A specialized process, regulated decision, proprietary dataset, or difficult integration gives an agent work that an incumbent can’t easily reproduce.
Jack Henry hasn’t announced a Canadian release, but the deployment problem is familiar. Canadian regulated AI workshops have identified vendor dependence, data quality, model validation, and accountability as barriers to production use.
Access to a capable model isn’t the constraint. Banks need to connect it to existing systems without losing control of data, permissions, decisions, or operational risk. National Bank’s Sardine deployment follows that reality by embedding external device intelligence and risk scoring into retail, commercial, and wealth operations.
The Canada AI Consortium is working on common controls for models, agents, users, and enterprise systems. Its use cases differ from Jack Henry’s security project, but the operating requirement is the same: agents need restricted access, visible decisions, and accountable people.
For Canadian banks and fintechs, the commercial challenge is solving those controls inside regulated workflows. Products that leave the integration and governance work to the bank may struggle to progress beyond a pilot.
As foundation models become easier to replace, will banking software competition depend less on who owns the AI and more on who controls the workflows where agents can act?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Payments Canada says Canada’s Real-Time Rail (RTR) By-law and Rules received all necessary approvals on June 30, 2026, take effect August 24, 2026, and support a planned Q4 2026 launch. RTR is Canada’s new real-time exchange, clearing and settlement system for instant, data-rich payments.
The approved Rules establish participant roles and the legal operating framework, but they do not provide automatic access. PSP participation can also require RPAA registration where applicable, Payments Canada membership, a direct or agent settlement model, ISO 20022 integration, centralized fraud services, testing, certification and continuous operations.
Coverage includes the RTR By-law, RTR Rules, public policies, PSP participation pathways, direct and indirect settlement, centralized fraud controls, ISO 20022, payment finality, testing, phased launch and the capabilities the framework can support.
Use this Regulatory Intelligence page to understand what is now approved, identify the operating path that fits your role, follow the dependencies behind each capability and open the official documents needed for implementation.
RTR is the result of a decade-long modernization effort, not a 2024 initiative. The journey includes early design work, vendor selection, missed launch targets, a 2023 delay acknowledgement, a 2024 program restart, legal consultation, rule approval and the current transition toward production.
This is the overview readers need before entering the detailed framework. It separates the changes now settled in the approved legal framework from the implementation work that still determines who can participate, how they connect and what they can offer.
The By-law and Rules establish the formal basis for payment-message exchange, clearing, settlement, participant roles, compliance, recourse and system operation. Implication: planning can proceed against approved rules rather than draft policy.
Canadian Payments Act changes and RPAA registration allow eligible PSPs to seek Payments Canada membership and RTR participation. Implication: eligibility opens the route; it does not grant automatic membership, direct settlement or production access.
Organizations may pursue direct settlement, use a settlement agent, build customer products through an RTR participant or provide connectivity and software services. Implication: control, cost, time and continuing obligations differ materially by pathway.
Direct settlement requires a Bank of Canada RTR settlement account; other participants may rely on a settlement agent. Implication: liquidity, funding, contracts, resilience and operating responsibility change with the settlement model.
Confirmation of Payee, Central Fraud Analytics, the Central Risk List and Central Fraud Reporting complement participant controls. Implication: firms must integrate, contribute data, make documented decisions and support continuous fraud operations.
Technical specifications, ISO 20022 mapping, security, testing, certification, operational readiness and 24/7 support remain production gates. Implication: time and cost now shift from rule uncertainty to execution readiness.
Choose the role you want to play, confirm whether RPAA registration applies, and map the Payments Canada membership, settlement, fraud, testing and 24/7 operating work that follows.
Start with the customer result you want to deliver. Then compare direct participation with partner, software, connectivity or managed settlement routes before committing to the highest-cost model.
Rule approval removes one source of uncertainty. The next signals are participant approvals, settlement agreements, certification, pricing, product launches, customer adoption and fraud performance.
Select any item to see what it requires, what it enables and where to go next. Follow the highlighted connections from legal authority and operating rules into participation, controls, customer use cases and infrastructure opportunities. For product nodes, the right panel also points to the numbered shared-rail functions shown directly below this map.
Select the role closest to the operating model being considered. The pathway below shows the sequence of gates, the regulatory and operating work that increases cost or time, what the route unlocks and where a lighter model may be available.
Move from the RTR rules into the distinct regulatory, implementation, competition and innovation questions that affect market entry and commercial deployment.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
July 10, 2026

Financial technology organizations are often able to grow - employing staff from different countries - these companies use international recruitment to address high workloads, find highly trained employees and enter new geographical areas. Many professionals, like software engineers, data researchers and client service experts, prefer roles that allow them to work from any location. While these hiring practices are beneficial, businesses are responsible for managing the specific challenges involved.
Worker classification is a primary factor for companies to manage when they hire across borders. Organizations that identify their staff correctly are able to prevent legal disputes and avoid the loss of money. Businesses that operate in multiple countries have fewer administrative tasks when they clearly define the legal status of their international workers.
Worker classification is the process where an organization determines if a person is an employee or an independent contractor. Companies are required to follow specific guidelines to establish the legal status of their workers. Government agencies and courts evaluate the degree of control an employer has and how much independence a worker maintains to make this decision. Please be aware that the label a company gives to a worker is not the only factor that determines their status.
This consideration is particularly important for companies that staff internationally. The status of a worker who provides services from abroad can change depending on the country where they originate. As such, businesses should understand the implications of classifying employees as independent contractors outside their jurisdiction.
Businesses can suffer adverse financial and legal consequences from misclassifying workers. For instance, companies may incur substantial expenses by following court orders mandating retroactive payments of payroll taxes, overtime, and social benefits. In addition, businesses must consider litigation costs in any resulting disputes over misclassification.
Companies that hire internationally must navigate complex legal frameworks when classifying their workers. Most jurisdictions allow businesses to employ independent contractors on either a full-time or part-time basis. However, certain countries require organizations to treat such workers like employees. It can be challenging to ensure that employment terms abide by all applicable statutory requirements in different jurisdictions. As such, companies may find themselves facing adverse consequences when trying to establish long-term contracts for workers based abroad. To mitigate these risks, businesses turn to local attorneys and a Toronto Employment Lawyer to understand the implications before hiring.
How a company classifies its workers influences how the business functions. Management must recognize the administrative tasks and legal requirements that apply to different categories of workers - these arrangements are important because they change how the company processes payroll, manages benefits plus protects private data. Leaders are able to use this information to plan their workforce and lower the risk of legal disputes.
The status of a worker is what defines their specific legal rights but also responsibilities. Individuals who are employees are usually eligible for more protections and company provided benefits than those who are independent contractors. If a company understands these distinctions, it is able to follow the law as well as maintain a consistent hiring process - this knowledge is necessary for organizations that intend to grow in multiple countries and use the specific abilities of their staff effectively.
The financial technology industry is subject to many regulations. Companies are required to dedicate time and money to follow laws regarding data privacy, security for digital information plus financial reporting. This commitment to compliance is also necessary when businesses hire staff. Classification of workers is an important process because these organizations manage private data and perform money transfers for customers. Organizations that hire people in other countries are encouraged to monitor legal changes but also speak with an employment lawyer. Audits are a helpful tool to identify problems and lower risks before a company hires remote employees.
Fintech companies often find benefits in hiring employees from other countries - this approach allows businesses to grow and find qualified workers in a larger market. All staff members must follow the same professional requirements regardless of their location. Management teams are responsible for creating clear rules for international hiring to keep processes uniform and minimize potential problems.
Rules change depending on the country - businesses are more successful when they monitor legal updates. A detailed plan for following laws is necessary because international employment is complex - these strategies are also important for keeping the trust of investors and protecting the public image of the company.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
July 9, 2026 | NCFA Market Activity | Fintech AI/ML, Data-driven, Automation, Generative AI, Enterprise, Scaleup, Fintech And Innovation

Wealth firms can’t automate revenue operations if the upstream data that's feeding billing, advisor compensation and reporting still needs manual repair.
On July 8, 2026, Toronto based PureFacts announced a strategic partnership with WealthTechs to launch new data aggregation and ingestion capability for wealth and asset management firms.
PureFacts will license and embed WealthTechs’ data aggregation and connectivity technology into its platform. The company will use the technology to connect, normalize and validate data before it enters revenue workflows.
Those workflows are high stakes. PureFacts supports fee billing, advisor compensation, practice management and revenue intelligence.
Robert Madej, Founder and CEO of PureFacts, said:
"This partnership with WealthTechs marks an important step forward in our mission to empower wealth firms with a trusted data foundation."
Wealth management has a data plumbing problem inside revenue operations.
Account records, transactions, portfolio data, fee schedules, householding rules and advisor relationships often come from different systems. The business still has to turn that data into client fees, advisor compensation, reporting and management insight.
PureFacts describes its platform as Revenue Performance Management software. Its product set includes fees and billing, advisor compensation, practice management and revenue book of record. WealthTechs brings an ingestion layer that turns source data into usable operating data.
Revenue, compensation and compliance teams all depend on the same underlying data. If that data is inconsistent, every workflow downstream inherits the problem.
PureFacts says the partnership supports future agentic AI capability, but the initial work starts with cleaner data.
Data has to be connected before it can be used. It has to be normalized before it can be compared. It has to be validated before a firm can trust automation inside billing, compensation or advisor operations.
The same requirement is emerging across wealth management. See: FutureVault Ships Agentic Document Intelligence For Advisors.
Agentic AI is even riskier since it may initiate a workflow, recommend an action or help resolve an exception. In wealth operations, that means the data layer needs controls, auditability and clear ownership before automation scales.
The partnership gives PureFacts a deeper data ingestion capability for revenue operations. Not AI as a headline. AI as the downstream beneficiary of cleaner enterprise data.
Can wealth firms deploy agentic AI in revenue operations before they solve data aggregation, normalization and validation?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
July 9, 2026 | NCFA Market Activity | Payments And Money Movement, SME Finance And Business Banking, Fintech And Innovation

On July 7, 2026, Winnipeg based Telpay announced that it acquired Notch Financial, a Toronto based accounts receivable automation company. Terms weren't disclosed.
The acquisition brings accounts receivable, invoicing and payment collection together with Telpay’s existing payment, payroll and approval workflows, expanding the platform from payment execution toward SME cash flow management.
Mark Loewen, President of Telpay, said:
"Businesses don’t lose sleep over how payments are processed, they worry about whether they’ll have the cash they need when they need it."
Notch Adds Receivables To Telpay who has spent more than 40 years helping businesses manage money going out through supplier payments, payroll and approval workflows. Notch adds the incoming cash side, including invoices, collections and receivables visibility.
The transaction confirms that Telpay is going from payments execution toward cash flow control for Canadian SMEs.
The acquisition comes as Canadian small businesses are paying closer attention to receivables, working capital and payment timing.
Payment timing remains an important operating indicator for Canadian SMEs. See: Canadian Small Business Revenue Turns Negative In Q4.
Cash flow pressure doesn't always come from a lack of sales. It can come from slow collections, manual invoicing, fragmented approvals or poor visibility into what cash is actually available. That's why AR and AP automation are becoming core SME infrastructure rather than back office software.
The same trend appears in Open Finance SME Capital Access, where fresh invoice, payment, account and cash flow data can support faster credit decisions and better liquidity tools.
Payment companies are expanding beyond transaction processing into the operating layer around cash flow. See: Lloyds Expands SME Payments With Stripe Infrastructure.
The strategic question though is who owns the actual SME relationship? The account, the payment workflow, the operating data or the cash flow tools.
Telpay now covers both sides of SME cash flow: (1) Outgoing payments through supplier payments and payroll, and (2) Incoming cash through invoicing, collections and receivables visibility.
The platform value increases when a business can see both sides without stitching together separate tools.
Jordan Huck, CEO of Notch, said:
"Together, we see tremendous opportunities to deliver even more value as businesses manage every aspect of their cash flow."
Will Canadian SME payment platforms win by processing transactions, or by owning the cash flow workflow around invoices, collections, approvals and working capital?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |