Security & compliance
Compliance-first is why we can say yes.
Grayde is a money services business registered with FINTRAC. Our program is built to satisfy the PCMLTFA, and to give our banking partners the visibility that keeps your account open.
FINTRAC-REGISTERED MSB
DOMESTIC CAD ONLY
NO CROSS-BORDER ACTIVITY
Our compliance program
REGISTRATION
FINTRAC-registered MSB
Registered and in good standing, with the reporting obligations of a Canadian money services business.
KYB
Know your business
Corporate records, beneficial ownership to 25%, directors, and the operating model behind the flow of funds.
AML
Documented AML program
Written policy, appointed compliance officer, annual training and biennial effectiveness review.
SCREENING
Sanctions & PEP screening
Every counterparty screened against Canadian sanctions lists and PEP data at onboarding and continuously.
MONITORING
Transaction monitoring
Rules tuned to your model, not a generic template, with alerts reviewed by people who know your file.
REPORTING
Regulatory reporting
LCTR, STR and terrorist property reporting handled as required, without disrupting your operations.
ACCESS
Access control
Role-based permissions, enforced two-factor authentication, SSO available on Growth and above.
DATA
Encryption in transit & at rest
TLS 1.2+ on every connection, AES-256 at rest, with data residency in Canada.
RESILIENCE
Continuity & recovery
Documented business continuity plan, tested annually, with defined recovery objectives.
How onboarding works
Most files reach a decision in five business days. Complex structures take longer, and we'll tell you which you are on the first call.
DAY 0
Discovery call
Thirty minutes on your model, volumes, rails and timelines. We tell you honestly whether we can help.
DAY 1
Application
Corporate documents, ownership, compliance program and expected flow of funds.
DAY 2 to 4
Compliance review
KYB, screening and risk assessment. We come back with questions, not silence.
DAY 5
Decision & agreement
Approved limits, rails, pricing and settlement terms in writing.
DAY 5+
Go live
Wallet funded, portal users created, sandbox and production keys issued.
What we'll ask you for
- ·Articles of incorporation and current corporate profile report
- ·Ownership structure with beneficial owners at 25% or more
- ·Directors and signing officers with government photo identification
- ·Business bank account details for funding and settlement
- ·Written AML policy and appointed compliance officer (regulated clients)
- ·Expected monthly volume, average transaction size and rail mix
- ·A short description of where the money comes from and where it goes
How we protect funds and data
Segregated client funds
Client balances are held separately from Grayde operating funds at a Canadian financial institution.
Daily reconciliation
Wallet balances reconcile to the underlying settlement account every business day.
Least-privilege access
Internal access to client data is role-scoped, logged and reviewed quarterly.
Independent penetration testing
Annual third-party testing of the portal and API, with remediation tracked to closure.
Canadian data residency
Production data is stored and processed in Canada.
A note on scope
Grayde processes Canadian-dollar transactions between Canadian financial institutions only. We do not offer foreign exchange, currency conversion, or cross-border payments of any kind. Clients whose business requires those services should treat Grayde as their domestic rail and hold a separate provider for anything that leaves the country.