The North American market and the ccTLD home.

Canadian financial services are supervised at the federal level by the Office of the Superintendent of Financial Institutions (OSFI) for prudential matters, the Financial Consumer Agency of Canada (FCAC) for consumer protection, and the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) for anti-money-laundering supervision under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA).

Securities matters are provincial. Ontario is supervised by the Ontario Securities Commission (OSC), Quebec by the Autorite des marches financiers, British Columbia by the BCSC, and so on. OSFI's Guideline E-23 on Model Risk Management has been the de-facto starting point for any regulated firm operating an AI model in Canada, and is the guideline the Veetso governance system maps to most directly.

VEETSO LIMITED is a UK company. Where regulated banking, payment, or money-services-business activity is made available to Canadian customers, it is provided in partnership with a Canadian-licensed institution under the framework that applies in Canada. The licensed partner is the regulated party; Veetso operates the technology layer. The substance and division of responsibilities are documented and available to partners under NDA.

This pattern is recognised under OSFI's outsourcing guidelines and the related FINTRAC supervisory framework for third-party arrangements.

Personal data on Canadian customers is processed under the Personal Information Protection and Electronic Documents Act (PIPEDA) at the federal level and the equivalent provincial regimes (Quebec's Law 25, British Columbia's PIPA, Alberta's PIPA) where they apply. The Office of the Privacy Commissioner of Canada is the federal supervisory authority.

Canada's proposed Artificial Intelligence and Data Act (AIDA), Part 3 of Bill C-27, sets out the direction of federal AI regulation. Veetso's governance system was designed against that direction of travel: an inventory of AI use cases, documented human oversight, vendor due diligence, and an audit trail.