FINTRAC Registered
Registered money services business oversight in Canada.
RPAA Registered
Operational controls aligned to Canadian retail payment activity expectations.
PCl Level 1 Certified
Our payment gateway infrastructure is PCl DSS 1 certified to support secure card operations.
Operational Controls
Monitoring, auditability, reconciliation and workflow controls across all operational layers.
Regional Infrastructure
Customer onboarding workflows
Risk review procedures
Beneficiary verification
Operational due diligence
Transaction monitoring
Workflow approvals
Reconciliation controls
Audit logging
Access controls
Segregated operational structures
Reporting workflows
Operational resilience
Banking partner connectivity
Acquiring partner integrations
Program governance
Regional compliance controls
OPERATIONAL GOVERNANCE FRAMEWORK
1. Client Platform
Clients initiate transactions and operational requests through secure platforms and API integrations.
2. Compliance Review
Onboarding and activity undergo risk-based review verification and approval by compliance teams.
3. Operational Controls
Policies, limits, approvals and business rules enforced before processing.
4. Payment Infrastructure
Transactions processed through secure, controlled infrastructure including our PCI DSS Level 1 certified gateway.
5. Monitoring & Reconciliation
Real-time monitoring, settlement validation, and reconciliation across all transaction flows.
6. Reporting & Auditability
Comprehensive reporting and audit trails to support regulatory internal, and external audit requirements.
SECURITY & CONTROL ENVIRONMENT
Role—Based Access Controls
Least privilege access model with segregation of duties across systems and data.
Maker—Checker Functions
Critical actions require independent review and approval before execution.
Strong Authentication
Multi-factor authentication and token-based access for all user and API access.
Operational Logging
Comprehensive logging of all system access, changes, and transactions.
Monitoring Systems
24/7 monitoring of infrastructure applications and transactional activity.
Infrastructure Redundancy
High availability architecture with redundancy across multiple data centers and regions.
Data Protection
Encryption in transit and at rest, with strict data handling and retention policies.