Karsten Wenzlaff, Advisor
August 26th, 2025
July 8, 2026 | NCFA Insight | Artificial Intelligence And Data, Risk Compliance And Regtech, Digital Identity And Trust, Cybersecurity And Fraud, Fintech And Innovation

On July 7, 2026, Lightworks, Scotiabank, Sun Life and TELUS launched The AI Consortium to jointly build critical AI control infrastructure in Canada. Lightworks will operate the consortium’s infrastructure and coordinate deployment across members.
The first project is an Agentic Control Plane, described as a system for enterprise visibility and control across models, agents, users and inference pipelines (think regulated enterprises). Future projects named in the release include an AI Operations Center and AI Token Exchange.
The announcement points to the reality that Canadian regulated enterprises are beginning to pool the control systems they’ll need before agentic AI reaches banking, insurance, telecom, compliance, fraud, advice and operations at scale.
The consortium model solves a practical problem. AI control infrastructure is expensive to build alone. Banks, insurers and telecom firms have similar needs around agent visibility, permissioning, audit trails, inference monitoring, incident response, cyber controls, governance evidence and internal authority.
Building those controls separately inside every firm creates duplicated cost and slower learning.
Pooling engineering, research and governance resources can lower build costs, spread deployment lessons across members and create shared IP that Canadian firms can improve together.
There is also a competitive angle. Large U.S. AI firms are already building control points around cloud platforms, chips, data centres, model access, enterprise tools and distribution. The AI Infrastructure Partnership from BlackRock, Global Infrastructure Partners, Microsoft and MGX was designed to invest in data centres and supporting power infrastructure, with a stated goal of mobilizing up to $100 billion including debt financing.
Canadian firms can buy AI tools from global providers, but the risk is eroding domestic sovereignty as buying isn't the same as control.
If banks, insurers and telecom firms rely entirely on outside platforms for agent permissions, runtime monitoring, audit evidence and governance records, they risk becoming downstream users of systems they can't shape and certainly not control. Shared Canadian infrastructure gives them a way to build capability, retain control knowledge and compete before foreign platforms define how enterprise AI is governed.
Collaboration also creates governance questions. If member firms rely on common systems for agent permissions, policy enforcement, monitoring, logging and deployment standards, that shared system becomes important infrastructure. Governance, failure handling, evidence retention, security incidents, membership, commercialization and Canadian IP will all shape whether the model becomes durable.
Those questions come with any shared system that becomes strategically important.
Traditional AI tools may summarize documents, classify records or support customer service. Agentic systems can act across tools, workflows and data environments, which alters the risk profile.
Companies need to know which agents are active, which models they use, which users can deploy them, what systems they can touch, what actions need human approval, how outputs are logged and how failures are detected.
The consortium’s Agentic Control Plane directly targets that problem by focusing on visibility and control across models, agents, users and inference pipelines.
The UK FCA’s Mills Review examines how AI may affect retail financial services, consumers, firms, markets and regulation. Reuters reported that the review raised concerns around AI driven financial advice, customer harm, fraud, cyber risk and reliance on a small number of technology providers.
Singapore is already more specific on agentic finance. The Monetary Authority of Singapore’s Safeguards for Agentic Finance at Runtime work focuses on how AI agents in financial services can operate safely, securely and reliably.
Regulated firms need more than AI principles. They need controls that define what agents can do, how human oversight is triggered, what gets recorded and how firms respond when something goes wrong.
Scotiabank and Sun Life's participation make this financially relevant.
Agentic AI could eventually support customer service, claims handling, fraud monitoring, compliance workflows, credit support, treasury operations, internal software development and employee productivity. Those are implications, not confirmed consortium use cases.
AI agents in financial services may touch sensitive data, regulated advice boundaries, customer records, third party tools, payment workflows, fraud controls and internal decision processes. The more useful agents become, the more important it becomes to know who approved them, what they accessed, what they did and how exceptions are handled.
Control infrastructure needs to come before wider spread deployment.
The consortium also fits a wider Canadian AI infrastructure theme.
In May 2026, the Government of Canada and TELUS advanced work on sovereign AI infrastructure. That project is separate from the consortium and should not be conflated with it.
Still, the direction is consistent. Canada is trying to build more domestic AI capability rather than rely only on external platforms.
Sovereign AI is not only compute. For regulated sectors, it also means governance systems, audit evidence, agent controls, security practices and operational knowledge that Canadian firms can shape directly.
Industry consortiums usually appear when a problem is too expensive, risky or systemically important for firms to solve alone. Financial services has seen this pattern before in shared utilities, payment systems, identity programs, fraud controls, standards bodies and market infrastructure. AI is entering similar territory because the costs and risks are common across regulated firms.
The consortium structure could create practical benefits, such as common controls, faster security learning, better incident response patterns, shared governance evidence and stronger procurement leverage with external AI providers.
This trend aligns with agentic AI risk and governance, where the core issue isn't only what agents can do, but who controls them. It also connects to regulated AI control gaps around data, vendors, fraud and operational risk.
The financial crime angle is important too. AI, programmable finance and financial crime are converging as bad actors use automation while regulated firms try to strengthen controls.
For NCFA's Financial Innovation Map, the relevant nodes include Agentic Finance, AI Governance, Digital Identity And Trust, Regtech, Cybersecurity And Fraud, Operational Risk, permissioned agents, auditability and sovereign AI infrastructure.
Follow-up questions are whether additional regulated firms join, whether regulators reference the model, whether the AI Operations Center is launched, and how the AI Token Exchange is defined in practical terms.
Will the consortium publish standards, audit methods or governance patterns? Does it commercialize infrastructure beyond founding members? Does it create shared security practices? Does it become a Canadian regulated sector AI utility?
If Canadian firms build shared AI control infrastructure to reduce cost, learn faster and compete with global platforms, who governs the control system once agentic AI becomes critical to banking, insurance and telecom operations?
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer to peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: [www.ncfacanada.org](http://www.ncfacanada.org)
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Jul 3, 2026 | NCFA Resource | Regulation And Policy, Banking And Credit, Risk Compliance And Regtech

NCFA has published a new Regulatory Intelligence guide to OSFI fast track approvals. The guide explains the official Streamlined Approvals Framework for Targeted New Entrants and how eligible organizations can prepare for federal entry as a bank, trust company, loan company or federal credit union.
It brings OSFI’s framework overview, screening criteria, application requirements, three process phases, indicative timelines, toolkit documents and applicant dashboard into one practical reference.
The guide helps readers understand how OSFI’s Streamlined Approvals Framework is designed to make approvals clearer and more predictable while maintaining prudential standards.
It follows the process from eligibility screening and the initial readiness assessment through formal application review, ministerial approval and operational readiness where an Order to Commence and Carry on Business is required.
The framework currently targets two groups: provincial credit unions seeking federal continuance and entities with technologically innovative or emerging banking models, including fintechs and crypto asset custodians, seeking to incorporate as a bank or federally regulated trust and loan company.
This resource is useful for fintech founders, provincial credit unions, prospective banks, trust and loan companies, crypto asset custodians, compliance teams, investors, legal advisors and organizations assessing federal financial institution status.
It is especially useful for teams evaluating licensing strategy, ownership, governance, capital and liquidity, operational controls, risk management, supervisory readiness and whether federal institution status is commercially justified.
The guide consolidates a detailed approvals process into one applicant workflow. Readers can compare the two eligible routes, review evidence expectations, identify common delay risks and understand where OSFI’s published timelines apply.
The framework is targeted. It is not a general fast track for every fintech, payments company, lender or financial platform. Organizations outside its scope may need other routes, including Retail Payment Activities Act registration, securities registration, provincial licensing or partnerships with regulated institutions.
OSFI may refine the framework as it gains experience and may limit the number of applications processed through it. Readers should use the guide for ecosystem intelligence and planning, not as legal, financial, investment, compliance or professional advice.
OSFI Fast Track And Streamlined Approvals Framework (primary NCFA guide)
OSFI Fast Track Approval Announcement (original NCFA analysis)
Canada Open Banking Rules And Regulations (related Regulatory Intelligence)
Canada’s Stablecoin Regulatory Framework (related Regulatory Intelligence)
OSFI Streamlined Approvals Framework (official framework)
OSFI Launch Announcement (official news release)
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |
Often described as the OSFI fast track, OSFI's Streamlined Approvals Framework gives eligible applicants a clearer route into Canada's federal financial system. It applies to provincial credit unions seeking federal continuance and to entities with innovative or emerging banking models, including fintechs or crypto asset custodians, seeking bank or federally regulated trust and loan company status.
What this guide adds: the official pages, toolkit materials, checklists and process guidance are reorganized into one applicant workflow with interpretation, delay risks, evidence expectations and related intelligence.
This is not a universal fintech route. OSFI limits the framework to two target groups and directs entities outside scope to existing approval processes.
PCUs need an established business model, operating history, provincial supervisory track record, capital capacity, scalable systems, member engagement plan and a viable provincial discontinuance path.
Innovators need a meaningfully different banking model or product, a credible institution destination, financial strength, governance, business plan, risk capability and evidence that federal regulation is needed.
Payment firms, platforms, lenders and vendors may need RPAA registration, securities registration, provincial licensing or partnership models rather than federal institution status.
OSFI publishes stage targets, not a guaranteed end to end timeline. Actual timing depends on applicant preparation, completeness, security checks, statutory decisions and responsiveness.
Rolling intake. Applicant contacts OSFI when ready.
Self-assessment, evidence build and early preparation.
Readiness Assessment letter within 4 weeks after meeting.
12-month OSFI target after complete filing is acknowledged.
Separate statutory decision. No OSFI target stated.
About 3 months where OCCB readiness review applies.
*Phase 3 note: Operational readiness applies where an Order to Commence and Carry on Business is required. For local cooperative credit societies continuing as federal credit unions, Letters Patent and OCCB are issued together.
Budgeting estimate: Where applicable OSFI targets apply, the published target stages add up to roughly 16 months plus applicant preparation, completeness review, security checks, Ministerial decision timing and remediation. This is an expectation management estimate, not an approval guarantee.
Choose the applicant path, then click a step. Each step brings OSFI's requirements together with applicant preparation, timing expectations, source documents, delay risks and Analysis.
Screening is the point where a provincial credit union tests whether the streamlined framework is the correct doorway. The question is not simply whether the organization wants federal status. The question is whether the applicant is already close enough to federal readiness that a targeted, risk-based pathway makes sense.
OSFI is looking for a supervised provincial credit union with an established model, a credible reason to continue federally, an operating history that can be assessed, and a practical path for leaving the provincial framework. The applicant also needs to be prepared for conditions, restrictions or other mitigants at entry where OSFI considers them appropriate.
This is a fit test, not a speed lane. A PCU that cannot explain the strategic necessity of federal continuance, the member value proposition and the readiness plan is likely to spend time and money before the real blocker becomes visible.
Phase 1 lets OSFI review enough information to understand the applicant's ownership structure, financial strength, business plan, governance, federal continuance rationale, readiness gaps and overall suitability before the formal application begins.
The PCU should be ready to disclose its jurisdiction and establishment date, organization chart with ownership percentages, substantial investments, significant interests, voting rights over 10%, ownership distribution, sources of capital for initial and ongoing support, financial services and non-financial activities, three years of audited financial statements, any credit rating, and any prior denials, criminal proceedings or administrative sanctions.
The five-year business plan needs to explain why the applicant wants to continue as an FCU, what transitional relief may be requested, target markets, opportunities, competitors, strategic assumptions, lines of business, product and service integration, risk-based capital and leverage ratios, pro forma financial statements, organizational structure, board and management composition, SMSB categorization, internal capital and liquidity targets, initial exit strategy and the work already performed to prepare for federal continuance.
The four-week target applies after the readiness meeting, not after first contact. The output is a readiness letter that helps determine whether the applicant should proceed and what OSFI expects next.
Phase 1 should expose the real work before the formal application. The strongest applicants will treat it as a board level readiness review across business strategy, capital, member mandate, systems, governance and provincial transition planning.
Pre-meeting evidence build, readiness self-assessment and early gap analysis.
PCUs have a specific member authorization branch because federal continuance affects members and requires a special resolution process. OSFI must approve the Disclosure Notice before the member vote and before Phase 2 materials are submitted.
The PCU has to prepare a member package, draft Disclosure Notice, timing plan, CDIC consultation path and special resolution process that allow members to understand the implications of continuing as an FCU.
This is where the PCU path stops being a regulator-only process. Stakeholder confidence, member education and transition governance matter as much as document preparation.
Member vote sequencing and disclosure package planning.
Phase 2 is the formal review of the application for Letters Patent. It turns the readiness discussion into a complete filing and gives OSFI the evidence needed to make a recommendation.
The PCU package includes the formal application, Canada Gazette and newspaper notice, fees, evidence of member authorization, financial projections, stress cases, business strategy, transition plan and responses to information requests. The 12-month target begins only after OSFI acknowledges the filing is complete.
OSFI is assessing board composition, committee structure, oversight functions, management responsibilities, risk management, related-party arrangements, regulatory compliance management, privacy, fraud controls, records, outsourcing, operational risk, business continuity, disaster recovery, capital adequacy, liquidity and the ability to operate under federal expectations.
The main risk is treating Phase 2 as a document exercise. It is really a proof of supervisability exercise. The filing must show that the institution can operate federally, not just that it can describe federal expectations.
OSFI may recommend approval, but the statutory Ministerial decision remains a separate dependency. This is why OSFI's published stage targets should not be converted into a guaranteed approval date.
Applicants need to keep operating plans, member communications and investor expectations current while the statutory decision is pending. Unresolved conditions, security issues or policy considerations can affect timing and certainty.
Process transparency helps reduce ambiguity, but it does not eliminate statutory discretion. Any external communication should separate OSFI review targets from final approval and launch readiness.
For local cooperative credit societies continuing as FCUs, Letters Patent and the Order to Commence and Carry on Business are issued at the same time. That makes practical readiness part of the formal application build, not a later phase.
The applicant needs completed continuance mechanics, final transition controls, member and provincial transition work, implementation readiness and the ability to operate federally on commencement.
PCUs should not wait for approval to build launch readiness. The pathway compresses approval and commencement, which makes early operating preparation more important.
Federal credit union continuance mechanics.
The applicant enters ongoing federal supervision and must operate with federal expectations for governance, capital, liquidity, risk management, operational resilience, regulatory reporting and compliance.
Approval is the beginning of supervised scale. The commercial value of federal status depends on whether the institution can convert federal reach into durable member value and operational resilience.
Screening tests whether the applicant is actually a targeted new entrant with a technologically innovative or emerging banking model, and whether the proposed destination is a bank or federally regulated trust or loan company rather than a lighter regulatory path.
OSFI is looking for a model that is meaningfully different through operating model, capability, distribution framework, process design, efficiency, cost, speed, resilience, accessibility, risk management or product design. The model also needs to justify entry into the federal prudential perimeter.
The first strategic test is not "is this fintech innovative?" It is "does federal institution status unlock a capability the firm cannot reach faster and more safely through another route?"
Phase 1 gives OSFI a written submission and meeting basis to review the applicant's business model, governance, ownership structure, financial resilience and overall readiness before the formal application.
The innovator should be ready to provide jurisdiction and establishment date, corporate group chart with ownership percentages, 10%+ voting interests, voting or control arrangements, affiliates and activities, Canadian operations, regulatory oversight by jurisdiction, government ownership interests, access to ongoing financial support, three years of audited consolidated financial statements, credit rating if available, prior denials and any criminal proceedings or administrative sanctions.
The five-year business plan should explain why the proposed FRFI is needed, target markets, opportunities, competitors, success assumptions, each line of business, products and services, how lines of business interrelate, liquidity metrics including NCCF and LCR, risk-based capital and leverage ratios on a Basel III basis, five-year pro forma financial statements, reporting lines, senior management responsibilities, board composition, SMSB categorization and an initial exit strategy.
Phase 1 is where a fintech should prove it is institution-ready. Innovation may create the reason to apply, but governance, financial strength, ownership transparency, capital planning and exit credibility determine whether the application can proceed intelligently.
Pre-meeting evidence build and investor/board readiness review.
After Phase 1, OSFI may provide preliminary views that help determine whether the applicant should move toward a formal application under the streamlined framework or use another existing approval process.
The decision is not approval. It is a path decision. A positive signal means the applicant may have enough fit and readiness to justify the heavier formal application. A weak signal may indicate that the model, capital plan, governance, ownership structure or institution destination is not yet credible.
This is the cheapest point to stop, restructure, change the institution destination or choose a partnership route. Treat it as a strategic checkpoint, not an administrative transition.
Deciding whether to advance, pause or switch paths.
Phase 2 is the comprehensive formal review. It converts the Phase 1 business case into a complete application record that OSFI can use to assess whether to recommend approval.
Across new-entrant applications, OSFI assesses whether the applicant has enough resources to support the proposed institution, whether business record and experience are appropriate, whether character, integrity and reputation are acceptable, whether national security or international obligations issues arise, whether the business plan is sound and feasible, whether risks are understood and can be controlled before commencement, whether initial capital protects depositors and creditors, and whether directors and senior officers have the necessary experience and competence.
The formal application needs notices, filing materials, service charge, financial projections, business plan detail, assumptions, stress and contingency analysis, capital and liquidity plan, major asset and liability categories, expense and income categories and evidence that the applicant can fund the regulated institution over time.
The formal checklist brings the applicant into deeper prudential territory: board effectiveness, senior officer roles, risk management framework, operational risk, third party arrangements, privacy, fraud, records, business continuity, disaster recovery, regulatory compliance management and internal controls. The filing should show how the organization will operate, not only who owns it.
The 12-month target begins only after OSFI acknowledges a complete filing. In practice, missing evidence, weak assumptions, unresolved security checks, governance gaps, vendor dependencies, unclear capital support or unconvincing risk controls can extend the elapsed process.
Phase 2 is not a bigger version of Phase 1. It is the proof of supervisability stage. Applicants should run parallel workstreams for capital, governance, risk, security, technology, legal, compliance and operating readiness rather than waiting for OSFI requests one by one.
OSFI may recommend approval, but Ministerial decision-making is a separate statutory dependency. This stage turns the supervisory recommendation into a formal approval decision where applicable.
Applicants should keep capital plans, staffing, vendor readiness, investor communications and public expectations aligned with the reality that OSFI's stage targets do not guarantee Ministerial timing or launch date.
This is where the public dashboard may help with transparency if the applicant consents, but transparency is not certainty. External messaging should separate application milestone, statutory approval and operational launch.
Public milestone tracking if the applicant consents.
Phase 3 confirms whether the applicant is ready to begin business after approval. OSFI reviews whether key people, policies, processes and systems are in place and whether any remaining gaps require conditions, restrictions or remediation.
Applicants should expect to provide evidence such as board and shareholder meeting materials, paid-in capital confirmation, incorporation and organization cost information, commitments around material business plan changes, the OCCB request and evidence that launch-critical systems, people, controls and policies are operating.
This is where paper readiness becomes operating capability. Conditions can shape product scope, geographic scope, growth pace, partnerships, funding needs and early customer strategy.
OCCB readiness and launch-condition planning.
The applicant begins operating as a bank or federally regulated trust or loan company and enters ongoing prudential supervision. The launch is not the end of the regulatory burden; it is the point where the applicant's operating model must meet the promises made through the application process.
Depending on the approved institution type and conditions, approval may enable regulated banking or trust activity, custody and fiduciary services where permitted, deposit or lending activity if approved, or regulated partnership infrastructure.
The commercial case depends on whether the federal status unlocks a durable capability that could not be reached faster through a lighter pathway. The strongest applicants will connect licensing strategy, product strategy, compliance infrastructure and capital strategy before Phase 2.
NCFA’s regulation-to-market pathway shows how OSFI’s targeted approval process can translate into federal market entry, supervised launch and practical innovation opportunities.
Regulatory approval is only one part of market development. This guide connects to NCFA's broader Financial Innovation Map, which organizes innovation capabilities, market opportunities, companies, evidence, milestones and regulatory intelligence across Canada's fintech ecosystem.
The OSFI streamlined approvals framework is a high bar pathway for targeted new entrants. It does not create a general fintech fast track. Where an applicant qualifies, the framework may connect to market themes such as credit union modernization, regulated custody, trust infrastructure, governance technology, SME finance infrastructure, open finance and business identity.
Use these links to go deeper into adjacent regulation, market entry strategy, resources and evidence connected to federal financial system entry.
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, artificial intelligence, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
![]() | ![]() | ![]() |
|---|---|---|
![]() | ![]() | ![]() |