Does Mortgage360 make us FINTRAC compliant?

No software does. It produces the client identification records, screening results, retention and audit trail an examination asks for, so the evidence is assembled as you go rather than reconstructed under deadline. The compliance program remains the brokerage's obligation.

Which regulators does the platform account for?

FINTRAC and the PCMLTFA federally, OSFI B-20 for qualification, and the provincial regimes — FSRA and the MBLAA in Ontario, BCFSA in British Columbia, RECA in Alberta, and the equivalents elsewhere. It is built for Canadian regulation, not adapted from a US product.

What does a FSRA examination actually ask for?

Predominantly records: the client file, the disclosures, the identification, and evidence that your policies were followed rather than merely written. Brokerages fail examinations on record-keeping far more often than on bad deals.

How long are records retained?

Retention is set to satisfy the statutory minimums with margin, and records are held in a structured form rather than as attachments with a naming convention. A compliance record that depends on somebody's filing discipline is the one that fails on the file an examiner picks.

Can head office see compliance status across every agent?

Yes. Licensing status, continuing-education hours, renewal windows and outstanding compliance items roll up to a brokerage view, which is the point — a principal broker is accountable for files they did not personally work.

Does it handle CASL for marketing?

Consent state lives on the contact and is checked before any send, with unsubscribe handling and the required identification built into the templates rather than left to whoever writes the message.

Compliance

Mortgage360's compliance and regulatory posture: What the platform carries, and what stays with you

Mortgage360's compliance and regulatory posture, for the principal broker or compliance officer doing vendor due diligence: which rules the platform is built around, what it records, and where the obligation stays with the brokerage. For the product module your agents use day to day, see FINTRAC compliance software.

Book a demo See pricing

Regulatory frameworks

Federal + provincial

100%

Action audit

Every operation

7yr

Retention

Cryptographically signed

Export

Per-deal evidence

JSON / CSV / PDF

What we cover

Built for the rules you actually face

FSRA

Ontario regulator forms, licence verification, annual information return, supervisory officer hierarchy.

MBLAA

Ontario Mortgage Brokerages, Lenders and Administrators Act — record-keeping, disclosure, supervision.

FINTRAC

LCTR + STR reporting, beneficial ownership, PEP / sanctions screening, source-of-funds documentation.

OSFI B-20

Applies to federally regulated lenders, not to brokerages directly — but it sets the qualifying-rate and income-verification standard your files are underwritten against, so the stress-test math is built in.

Provincial regulators

BCFSA, RECA, FCAA, AMF and the other provincial regulators — licence status and continuing-education tracking per agent, per province.

Privacy

PIPEDA, Quebec Law 25 and GDPR — right to access, right to erasure, breach notification, consent management.

AML / KYC

Sanctions watchlist pre-check, then an AI first pass for PEP and adverse media, with every hit reviewed by a person. Periodic refresh (24mo cycle).

Evidence packs

Per-deal, per-period, per-policy. One-click export with cryptographic chain integrity proof.

Multi-tenant

Per-tenant compliance posture for networks and franchisors managing many brokerages.

Evidence packs

Auditor shows up. You hit export.

When the regulator comes, you don't scramble. Every required document, every signed log, every override, every approval — packaged in a single PDF + JSON with cryptographic chain integrity proof.

Audit evidence · MS-1042

Borrower ID validation (MRZ + AAMVA) · Mar 12
AML / PEP / sanctions screening · Mar 12
Income verification (Inverite CRA) · Mar 13
Bank pull (Flinks 90d) · Mar 14
Commitment letter v2 signed · Mar 18
Disclosure timing gate cleared · Mar 21
Conditions resolved (12 of 12) · Mar 26
Funding wire signed off · Mar 28

Chain hash verified · 32 entriesExport PDF + JSON

Shared responsibility

Software records the evidence. The obligation stays yours.

Since 11 October 2024, mortgage brokers, lenders and administrators have been reporting entities under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (see FINTRAC's guidance for the mortgage sector). That obligation belongs to the brokerage. No vendor can hold it for you, and one that says it can is overselling.

What Mortgage360 is responsible for

Keeping the records your program produces: identity checks, screening results, overrides and who made them, attached to the deal.
An audit log of actions taken in the platform, exportable per deal.
Security and data handling of the platform itself. See security, the privacy policy and the data processing addendum, which lists sub-processors.
Step-up authentication on privileged actions, such as dismissing a screening match.

What stays with your brokerage

Your compliance program: the appointed compliance officer, written policies, risk assessment, training and the two-year effectiveness review FINTRAC requires.
Deciding whether a transaction is suspicious, and filing reports with FINTRAC.
Licensing and supervision under your provincial regulator, such as FSRA in Ontario.
Privacy obligations to your clients under PIPEDA, or Quebec's private-sector privacy law where it applies.

Lender underwriting standards come from OSFI Guideline B-20 for federally regulated lenders. This page describes how the platform is designed. It is not legal advice; confirm your obligations with FINTRAC and your provincial regulator. How the checks run on each file is covered on the Harvey compliance AI page.

Ready when you are

Put the vendor questions to us directly

Talk to us about compliance See pricing

Compliance — common questions

Does Mortgage360 make us FINTRAC compliant?: No software does. It produces the client identification records, screening results, retention and audit trail an examination asks for, so the evidence is assembled as you go rather than reconstructed under deadline. The compliance program remains the brokerage's obligation.
Which regulators does the platform account for?: FINTRAC and the PCMLTFA federally, OSFI B-20 for qualification, and the provincial regimes — FSRA and the MBLAA in Ontario, BCFSA in British Columbia, RECA in Alberta, and the equivalents elsewhere. It is built for Canadian regulation, not adapted from a US product.
What does a FSRA examination actually ask for?: Predominantly records: the client file, the disclosures, the identification, and evidence that your policies were followed rather than merely written. Brokerages fail examinations on record-keeping far more often than on bad deals.
How long are records retained?: Retention is set to satisfy the statutory minimums with margin, and records are held in a structured form rather than as attachments with a naming convention. A compliance record that depends on somebody's filing discipline is the one that fails on the file an examiner picks.
Can head office see compliance status across every agent?: Yes. Licensing status, continuing-education hours, renewal windows and outstanding compliance items roll up to a brokerage view, which is the point — a principal broker is accountable for files they did not personally work.
Does it handle CASL for marketing?: Consent state lives on the contact and is checked before any send, with unsubscribe handling and the required identification built into the templates rather than left to whoever writes the message.