- Afghanistan
- Albania
- Algeria
- Andorra
- Angola
- Argentina
- Armenia
- Australia
- Austria
- Azerbaijan
- Bahrain
- Bangladesh
- Belarus
- Belgium
- Belize
- Bolivia
- Bosnia and Herzegovina
- Brazil
- British Virgin Islands
- Brunei
- Bulgaria
- Cambodia
- Cameroon
- Canada
- Chile
- China
- Colombia
- Costa Rica
- Croatia
- Curaçao
- Cyprus
- Czech Republic
- Denmark
- Dominican Republic
- Ecuador
- Egypt
- El Salvador
- Estonia
- Eswatini
- Ethiopia
- Finland
- France
- Germany
- Greece
- Haiti
- Hong Kong
- Hungary
- India
- Iraq
- Ireland
- Indonesia
- Italy
- Japan
- Jordan
- Kazakhstan
- Kenya
- Kosovo
- Kuwait
- Latvia
- Lithuania
- Luxembourg
- Malaysia
- Malta
- Mauritius
- Mexico
- Micronesia
- Moldova
- Monaco
- Mongolia
- Montenegro
- Morocco
- Mozambique
- Myanmar
- Namibia
- Nauru
- Nepal
- Nigeria
- Nicaragua
- Niue
- Norway
- Netherlands
- New Zealand
- Oman
- Pakistan
- Palau
- Palestine
- Panama
- Papua New Guinea
- Paraguay
- Peru
- Puerto Rico
- Philippines
- Portugal
- Poland
- Qatar
- Republic of Congo
- Romania
- Russia
- Rwanda
- Samoa
- San Marino
- Saudi Arabia
- Senegal
- Serbia
- Seychelles
- Sierra Leone
- Singapore
- Slovakia
- Slovenia
- Somalia
- South Africa
- South Korea
- South Sudan
- Spain
- Sri Lanka
- St Kitts and Nevis
- St Maarten
- St Lucia
- Sweden
- Switzerland `
- Syria
- Taiwan
- Tajikistan
- Tanzania
- Thailand
- Timor Leste
- Togo
- Tonga
- Trinidad and Tobago
- Turkey
- Turks and Caicos
- Turkmenistan
- Tunisia
- Tuvalu
- UAE
- Uganda
- Ukraine
- UK
- USA
- Vanuatu
- Vietnam
- Zambia
Scale Identity Verification and KYC Operations in Canada
Verify Canadians and newcomers through FINTRAC's photo ID, credit file and dual-process methods, ePassport NFC and 10,000+ foreign ID document types, run KYB on corporations and their real owners, and monitor transactions and sanctions lists. One platform runs compliance and fraud prevention across the full customer lifecycle for FINTRAC-supervised firms.
Operational Performance for Canada KYC
Our Numbers Speak Volumes
97.01%
Pass
Rates
Under 5 secs
IDV
Verification
95%
eIDV
Coverage
Canada IDV/KYC Challenges
No National ID Card, 13 Licence Formats
KYC in Canada starts without a national identity card, so most customers prove identity with a licence or photo card from one of 13 provinces and territories. Shufti checks each format against its issuer's security features and picks up redesigned cards without a template.
Keeping Customer Risk Current Requires Continuous Monitoring
Canada's AML rules require ongoing monitoring of every business relationship, and since March 2026 compliance programs must be risk-based and effective. Shufti checks transactions against each customer's profile, rescreens customers as sanctions and PEP lists change and flags registry, director and ownership changes.
Ownership Discrepancies Now Run on a 30-Day Clock
Since 1 October 2025, reporting entities must report material differences between the owners they identify and a federal corporation's filings with Corporations Canada within 30 days. Shufti compares extracted owners with the filings and flags every mismatch for review.
Thin Case Files Weaken FINTRAC Reports
Suspicious transaction reports must reach FINTRAC as soon as practicable, now including suspected sanctions evasion, and a report missing its evidence invites follow-up questions. Shufti's case management keeps the verified identity, alerts and analyst reasoning together, so each report starts complete.
Documents and Languages
Individual Documents Shufti Verifies in Canada
Shufti verifies 65+ Canadian identity documents plus passports and ID cards from other countries. The cards below cover the core documents Canadian onboarding relies on, with the full list on the supported documents page.
View All Supported DocumentsProvincial and Territorial Driver's Licences
Every province and territory issues its own licence, and it is the photo ID most Canadians carry. Shufti checks the layout, security features and expiry of each format, matches the photo to a live selfie and rejects altered or expired cards.
Provincial Photo ID Cards
Non-drivers rely on provincial cards such as the Ontario Photo Card, the BC Services Card and Alberta's photo ID card. Shufti verifies them like licences and declines health cards wherever provincial law bars their use as identification.
Canadian Passport
Canadian passports have carried an electronic chip since 2013. Shufti reads it by NFC and checks every passport across nine forensic detection layers, from MRZ checksum validation to hologram analysis, so a cloned or altered passport fails before onboarding.
Permanent Resident Card, Work and Study Permits
Immigration, Refugees and Citizenship Canada issues PR cards to permanent residents, while work and study permits are still paper documents. Shufti verifies the card's security features, reads each permit's details and expiry date, and matches both to the holder's selfie.
Secure Certificate of Indian Status
Indigenous Services Canada issues the secure status card with laser-engraved data, UV features and a machine-readable zone. Shufti reads the MRZ, checks the security features and matches the photo, so status card holders onboard without being asked for a second document.
Foreign Passports and National ID Cards
Shufti actively processes 10,000+ ID document types from 240+ countries and territories, and its zero-shot AI learns new document formats in minutes. Newcomers, international students and non-resident customers rely on them before they hold Canadian identification.
Proof of Address
Utility bills, property tax assessments, provincial vehicle registrations and insurance documents are verified in the same step as the ID, with the extracted address matched against the address the customer entered at sign-up.
Entity Identity
Certificate of Incorporation and Registry Extract
Shufti confirms the corporation's status, registered office and directors against Corporations Canada for federal corporations, or the Ontario Business Registry, BC Registries, the Registraire des entreprises du Québec and other provincial registries, with a live call at every check.
Articles, Bylaws and Constituting Documents
AI-OCR reads ownership, capital and signing authority from articles of incorporation, bylaws and co-operative or non-profit constituting documents, and flags GAN-generated or edited pages.
Certificate of Status
Shufti confirms the corporation is active and up to date with its annual filings, and flags any entity that has been dissolved or struck from the register.
Business Name Registrations and Master Business Licence
Sole proprietors and partnerships register trade names provincially, through documents such as Ontario's Master Business Licence or a Québec enterprise number (NEQ). Shufti checks the name, owner and registration number against the provincial record.
Business Address Proof
Leases, utility bills and property tax notices are cross-checked against the registered office address held by the corporate registry.
Tax Identity
CRA Business Number and Program Accounts
The Canada Revenue Agency assigns a nine-digit Business Number, with program accounts such as RT for GST/HST, RP for payroll and RC for corporate income tax. Shufti extracts the number, checks its format and matches the legal name to the registry.
QST and Provincial Sales Tax Registrations
Revenu Québec issues QST registration numbers, British Columbia and Saskatchewan issue PST numbers, and Manitoba registers businesses for retail sales tax. Shufti reads each registration and matches it to the business being onboarded.
Foreign Tax Registrations and FATCA/CRS Self-Certification
Foreign-owned entities and overseas parents are verified with their home-country tax registrations, and FATCA and CRS self-certifications are captured in the same case file.
Ownership and Control
Individuals with Significant Control Register
Under section 2.1 of the Canada Business Corporations Act, an individual with significant control holds 25% or more of the votes or share value, or controls the corporation in fact. Federal corporations have filed this register with Corporations Canada since 22 January 2024, and Shufti screens everyone on it.
Québec Ultimate Beneficiary Declarations
Since 31 March 2023, enterprises registered in Québec declare their ultimate beneficiaries to the Registraire des entreprises using the same threshold. Shufti reads these declarations and reconciles them with the ownership the customer provides.
Shareholder Register and Ownership Chart
Ontario and British Columbia corporations keep their beneficial ownership registers in their own records, so Shufti reads the register the customer supplies. It maps ownership through holding companies and trusts, including trustees, settlors and beneficiaries, and screens every person and entity in the chain.
Directors, Officers and Authorised Signatories
Each person is identity-verified and screened, and Shufti alerts the case owner when the registry records a change to the board or signing authority.
Languages We Cover
English, French and Newcomer Document Parsing
Canadian licences, passports and registry records come in English, French or both, and newcomers bring documents in many other scripts. Shufti's OCR reads 150+ languages and scripts at 99.7% accuracy and averages 93% accuracy against Google Vision's 78.4% in its published benchmark. Zero-shot document intelligence extracts data from layouts it has never seen, on first sight, without waiting for a template.
Canadian Name Matching
Native phonetic models for 80+ languages match accented and unaccented spellings such as François and Francois, hyphenated and compound surnames, and transliterated newcomer names in sanctions and PEP screening.
Cross-Document Consistency Checks
Names, dates of birth and identifiers are reconciled across licences, passports, PR cards, credit file data and filings on individuals with significant control, so one customer never splits into mismatched records.
Independent Validation
Shufti's Recognition Across Independent Evaluations
Ranked Exceptional in the Liminal Index 2026 for age estimation
View Report
Differentiated by Gartner on document diversity and country coverage
Read more
Certified at iBeta Level 3 PAD with 0% APCER
Read Blog
Broadest global reach in the 2025 KuppingerCole Extended IDV report
Download Report
Ranked Top 5 in the DHS RIVR 2025 for identity validation
Read Blog
Top Vendor for Product Execution in the Liminal Index for KYC 2026
View Report
Ranked Exceptional for age verification by Liminal Index 2026
View Report
Recognised as a Leader in G2 Fall 2026 reports
Read More
Regulatory Update
Every Verification Route Canadian Regulators Recognize, in One Platform
FINTRAC's guidance on verifying identity accepts government-issued photo ID for remote customers once the document is authenticated with technology and matched to the person, alongside the credit file and dual-process methods in section 105 of the PCMLTF Regulations. Shufti supports all three, plus chip and video routes for newcomers without a Canadian credit history.
Credit File Method
LiveFor customers with an established credit history, Shufti confirms name, address and date of birth against a Canadian credit file at least three years old with more than one tradeline, with no document upload and a decision in seconds.
Dual-Process Method (Docless eIDV)
LiveShufti confirms two of name and address, name and date of birth, or a financial account against two independent reliable sources, such as a credit bureau and a property tax record, and records each source, date and reference number.
NFC Chip Verification
LiveShufti reads the chip in Canadian ePassports and most foreign biometric passports and checks it against the printed data page, the high-assurance route for newcomers whose credit history is too short for the credit file method.
Fraud Prevention Across the Canadian Customer Journey
Reduce fraud losses and protect customer trust across onboarding, account access, and payments. Shufti connects identity, behavioral, device, network, and transaction intelligence to help Canadian businesses act on risk while keeping legitimate customers moving.
Governance & Controls
Audit-Ready Decisions, Lower Operational Drag
Fewer Avoidable Re-submissions
Capture guidance for provincial licences, photo cards and bilingual documents catches glare, cropping and blur before submission, so customers rarely need a second attempt.
Cleaner Audit Trails
Shufti's case management records sources, results, timestamps, evidence, analyst notes and decisions, packaged as report-ready bundles for the FINTRAC Web Reporting System or API.
One Workflow, One Back Office
Unify KYC, KYB, AML screening and transaction monitoring in one case file. Perpetual KYC/KYB tracks ownership, director and transaction changes, managing the full compliance lifecycle.
Credit File and Photo ID-First Flow Design
Customers with Canadian credit history verify through credit file or dual-process checks first, while newcomers move to photo ID and ePassport checks in one flow.
Shufti's IDV/KYC Solutions for Canada
KYC Solutions
KYC verification in Canada serves customers with long credit histories, newcomers without one, non-residents and people who would rather not upload a document. One Shufti flow routes each by risk, so nobody faces checks they don't need.
Explore More
Face Verification
Remote onboarding under FINTRAC's photo ID method depends on matching a selfie to the document photo. Shufti's face matching delivers a 99.5% first-try pass rate, and DHS RIVR 2025 testing measured a false match rate below 0.001.
.
Age Verification
Ontario's iGaming standards bar players under 19 from most gaming, and many other services restrict minors. Shufti estimates age from a selfie in under five seconds, blocks 99.8% of underage attempts and falls back to a document check when the estimate is close.
.
Bank Account Verification
Payouts and pre-authorised debits fail when an institution number, transit number or account holder name is wrong. Shufti validates Canadian account details and matches the holder's name in real time before the first transfer, so funds reach the right customer.
.
Address Verification
Utility bills and property tax assessments differ by province and provider. Shufti's layout-aware extraction and fuzzy matching verify them at a 99.3% pass rate, and docless checks confirm an address in under three seconds without an upload.
.
Document Verification
Canadian onboarding draws on 13 licence formats, provincial photo cards, passports, PR cards and status cards. Shufti verifies each within seconds, reading English and French fields and testing every document for tampering, screenshots and synthetic edits.
.
Identity Verification
Separate tools for documents, selfies, credit file checks and addresses split one customer across several records. Shufti runs document, biometric, NFC, address and docless checks in one API session and returns one decision with its evidence.
.KYB Solutions
Business verification in Canada means reconciling Corporations Canada and provincial registry records, CRA Business Numbers and ownership that often runs through holding companies and trusts. Shufti calls the registries live and identifies beneficial owners the way section 138 of the PCMLTF Regulations requires.
Explore More
Business Verification
Onboarding a Canadian company means confirming its registry status, Business Number, signatories and everyone who owns or controls 25% or more. Shufti's live registry call pulls that picture together in one check, putting corporate onboarding under two minutes.
.
Enhanced Due Diligence
Layered ownership, high-risk sectors, PEP links and registry mismatches call for a deeper review. Shufti's branching questionnaires, configurable risk scoring and verification links for beneficial owners collect the evidence and record every answer in the case file.
.AML Screening
A customer who is clean at onboarding can land on a list next week. Shufti's perpetual KYC rescreens every customer against 4,000+ watchlists, including the Consolidated Canadian Autonomous Sanctions List, Canada's listed terrorist entities and UN Security Council lists, refreshed every 15 minutes, with every hit in one case file.
Explore More
Business AML Screening
A company's risk often sits with its owners and directors. Shufti screens entities, beneficial owners and directors against designations under the Special Economic Measures Act and the Sergei Magnitsky Law, global lists and 50,000+ adverse media sources, and perpetual KYB rescreens the whole portfolio.
.
Transaction Monitoring
Cash and virtual currency receipts of $10,000 or more trigger FINTRAC reports, including smaller amounts that add up within 24 hours. Shufti's library of 500+ pre-built rules covers structuring, smurfing and mule activity, with 60% fewer false positives and alerts ready for case review.
.
Travel Rule
Virtual currency dealers must send and check originator and beneficiary details on qualifying transfers under FINTRAC's travel rule. Shufti's single integration connects to major Travel Rule networks, exchanges IVMS101 data and verifies ownership of unhosted wallets before funds move.
.
AI Compliance Co-Pilot
One common name can return 140+ screening hits. Shufti's AI Compliance Co-Pilot reviews every hit and gives a confidence score with a written reason, so analysts clear obvious false positives quickly while your compliance officer keeps the final call.
.Built To Fit Canada's Compliance Landscape
The PCMLTFA and its Regulations apply to every reporting entity in Canada, while OSFI, securities regulators, the Bank of Canada, Québec and provincial gaming regulators add their own rules. Shufti maps its KYC, KYB, AML screening and transaction monitoring controls to every regime below, so one platform covers each licence your group holds.
Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA)
Section 105 of the PCMLTF Regulations sets the identity methods, section 138 requires the names of everyone owning or controlling 25% or more of a corporation, section 123.1 requires ongoing monitoring and section 148 keeps records at least five years. Since 26 March 2026, the Act expressly prohibits anonymous accounts.
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
FINTRAC is Canada's financial intelligence unit and AML supervisor. Section 7 of the PCMLTFA requires suspicious transaction reports, including on suspected sanctions evasion, as soon as practicable. Since 26 March 2026, compliance programs must be risk-based and effective, and penalties reach $20 million per violation for an entity.
Corporations Canada (Individuals with Significant Control)
Federal corporations must keep a register of individuals with significant control, update it within 15 days of a change and file it with Corporations Canada. Under section 138.1 of the PCMLTF Regulations, in force since 1 October 2025, reporting entities report material discrepancies with those filings to Corporations Canada.
Office of the Superintendent of Financial Institutions (OSFI)
OSFI supervises federally regulated banks, insurers, and trust and loan companies. Guideline B-10 on third-party risk, effective 1 May 2024, expects institutions to manage outsourced and subcontracted services, including where data sits, and Guideline E-21 on operational risk and resilience has applied in full since 1 September 2026.
Canadian Securities Administrators (CSA)
Section 13.2 of National Instrument 31-103 requires registered firms to establish each client's identity and, for a corporation, who owns or controls more than 25% of its votes. The Canadian Investment Regulatory Organization (CIRO) sets dealer KYC rules, and crypto trading platforms serving Canadians must register with securities regulators.
Bank of Canada (Retail Payment Activities Act)
Payment service providers have registered with the Bank of Canada since November 2024, and its operational risk and fund safeguarding requirements have applied since 8 September 2025. The Retail Payment Activities Act leaves AML with FINTRAC, but the Bank can refuse registration after PCMLTFA convictions or penalties.
FINTRAC Money Services Business Registration
Money services businesses, including virtual currency dealers and foreign firms serving Canadians, must register with FINTRAC before operating. Since 1 June 2021, virtual currency transfers of $1,000 or more must carry originator and beneficiary details, and receipts of $10,000 or more require a large virtual currency transaction report.
Québec Money-Services Businesses Act
Money services businesses operating in Québec need a provincial licence on top of FINTRAC registration, administered by Revenu Québec. Licence classes cover currency exchange, funds transfers, money orders and traveller's cheques, cheque cashing, ATMs and cryptoasset ATMs, and a business needs the class matching each service it offers.
Alcohol and Gaming Commission of Ontario (AGCO)
The Registrar's Standards for Internet Gaming bar players under 19, with a narrow exception for lottery tickets, under Standard 3.01. Standard 3.04 requires player information to be validated before an account opens and Standard 3.10 an auditable trail. Casinos and provincial online lottery schemes are PCMLTFA reporting entities.
FINTRAC Reporting Entity Sectors
Real estate brokers and developers, accountants, BC notaries and dealers in precious metals and stones carry PCMLTFA duties. Mortgage administrators, brokers and lenders joined on 11 October 2024, factors, cheque cashers and financing or leasing entities on 1 April 2025, and title insurers on 1 October 2025.
Consolidated Canadian Autonomous Sanctions List
Global Affairs Canada consolidates people and entities designated under the Special Economic Measures Act and the Justice for Victims of Corrupt Foreign Officials Act. UN sanctions apply through the United Nations Act, and section 7.1 of the PCMLTFA requires reports on property owned or controlled by designated persons.
Public Safety Canada Listed Terrorist Entities
The Governor in Council lists terrorist entities under section 83.05 of the Criminal Code on the recommendation of the Minister of Public Safety. Section 83.08 prohibits anyone in Canada from knowingly dealing in property owned or controlled by a terrorist group or providing financial services for it.
Immigration, Refugees and Citizenship Canada (IRCC)
IRCC issues Canadian passports, permanent resident cards and work and study permits, while provinces and territories issue driver's licences and photo cards. FINTRAC accepts photo ID from federal, provincial, territorial and foreign governments, but not from municipal governments, and excludes health cards where provincial law prohibits their use.
Department of Finance Canada
Finance Canada leads the federal AML regime and published its 2025 Assessment of Money Laundering and Terrorist Financing Risks in Canada on 22 August 2025. The FATF and Asia/Pacific Group mutual evaluation of Canada, published on 29 September 2026, placed the country in regular follow-up with FATF.
Canada Data Residency and Deployment
Shufti runs in Canadian cloud regions in Montréal and Toronto, or on-premises inside your own infrastructure, including air-gapped deployments. Hosting locations and any transfer arrangements are fixed in your agreement, giving OSFI-regulated institutions the data location detail that Guideline B-10 asks them to manage.
Personal Information Protection and Electronic Documents Act (PIPEDA)
PIPEDA requires breaches with a real risk of significant harm to be reported as soon as feasible, and the Privacy Commissioner's 2025 guidance treats identifying biometrics as sensitive data that usually needs express consent. Shufti captures consent and protects data with encryption, role-based access and configurable retention.
Québec Law 25 and Biometric Rules
Québec requires express consent and prior disclosure to the Commission d'accès à l'information before identity is verified biometrically, and a privacy impact assessment before personal information leaves the province. Shufti can process Québec data in Montréal, uses only the facial data needed and deletes it after verification.
Alberta and British Columbia PIPA
Alberta and British Columbia have private-sector privacy laws deemed substantially similar to PIPEDA. In Alberta, firms must notify the Commissioner of breaches that risk significant harm and tell individuals when a service provider outside Canada is used. Shufti supplies audit logs, access controls and a data processing agreement.
Retention Controls
Retention is configurable by client and licence, covering Canada's five-year AML minimum and FINTRAC's 30-day window for producing records on request. Statutory minimums are not automatic deletion dates, and legal holds keep records in place when an investigation or examination is under way.
Encryption and Security
Data is encrypted in transit and at rest, with role-based access and audit logging throughout. ISO 27001:2022 and SOC 2 Type 2 reports support vendor assessments, including the third-party risk reviews that federally regulated banks and insurers run under OSFI's guidelines.
Automated Decisions and Biometric Data
Québec requires firms to tell a person when a decision rests exclusively on automated processing and to explain its main reasons on request. Shufti returns verification results and supporting reasons through the API and back office, so support teams can explain outcomes and escalate disputed results.
Scope of Our Role
Under clause 4.1.3 of Schedule 1 to PIPEDA, a firm stays accountable for personal information it transfers to a third party for processing. Shufti processes data on the firm's instructions as that service provider, and its privacy notice identifies any activities where it acts independently.
Data Residency and Privacy Controls in Canada
Canada AML Sources That Strengthen Decisions
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Office of the Superintendent of Financial Institutions (OSFI)
Global Affairs Canada
Public Safety Canada
Department of Finance Canada
Royal Canadian Mounted Police (RCMP)
Corporations Canada
Canada Revenue Agency (CRA)
Canadian Securities Administrators (CSA)
OSFI Designated Persons Advisories
Financial Action Task Force (FATF)
UN Security Council Consolidated List
Egmont Group of Financial Intelligence Units
Wolfsberg Group
Basel Committee on Banking Supervision
Turn Canada Verification Requirements into a Smoother Customer Journey
Share your customer types, risk rules and current onboarding process. A Shufti specialist will show you how to connect identity verification, KYB and ongoing monitoring, reducing operational hand-offs while keeping decision evidence organised for compliance review.
INDEPENDENTLY AUDITED. GLOBALLY CERTIFIED.
Certified to Global Standards
PROVEN WORKFLOWS
Identity Verification Built Around Your Industry in Canada
Open Accounts Remotely Under FINTRAC And OSFI Expectations
Banks verify identity under the PCMLTF Regulations and manage technology vendors under OSFI's third-party risk guideline. Shufti runs the photo ID, credit file and dual-process methods in one flow, opens accounts for newcomers through passport NFC, and keeps every decision in a case file ready for examination.
Frequently Asked Questions
Does Shufti support FINTRAC's credit file and dual-process methods, and what happens when customers cannot use them?
Yes. Shufti runs the credit file method for customers with a Canadian credit file at least three years old and the dual-process method using two independent sources. Newcomers without enough credit history move to photo ID with selfie matching or ePassport NFC in the same flow.
Is a photo of a driver's licence enough to verify a Canadian customer remotely?
No. For ID verification in Canada, FINTRAC expects the document to be authenticated with technology and the person matched to its photo, and says viewing an ID on a video call is not enough. Shufti checks security features, then matches a live selfie with liveness.
Can Shufti verify foreign documents or identity formats it has not encountered before?
Yes. Shufti's zero-shot AI adapts to unfamiliar layouts without a template, so a newcomer's national ID or a recently redesigned passport is checked for authenticity and tampering like any known format. FINTRAC accepts photo ID from foreign governments, though not from municipal authorities.
How does Shufti read bilingual English and French Canadian documents?
Shufti's OCR extracts the English and French fields on bilingual licences, passports and registry records, keeps accents such as é and ç intact, and reconciles both versions of a name or address. The same engine reads newcomer documents in Arabic, Chinese and other scripts.
How does Shufti verify ownership when a Canadian company has several corporate layers?
Shufti pulls registry records for each company in the chain, maps shareholdings and trusts through every holding entity and identifies owners at the 25% threshold. For federal corporations, it compares the result with the individuals with significant control filed with Corporations Canada.
Does Shufti's ongoing monitoring cover more than sanctions screening?
Yes. Section 123.1 of the PCMLTF Regulations requires monitoring that detects reportable transactions, keeps client information current and reassesses risk. Shufti monitors transactions against each customer's baseline, rescreens customers and owners, and alerts you when registry, director or ownership records change.
How does Shufti keep screening current and handle Canadian name variations?
Watchlists, including the Consolidated Canadian Autonomous Sanctions List, Canada's listed terrorist entities and UN lists, update within 15 minutes of a change at source. Phonetic matching handles French accents, hyphenated surnames and transliterated names, so a spelling difference does not hide a true match.
Can we choose Canadian hosting or run verification inside our own infrastructure?
Yes. Choose Shufti's Montréal or Toronto cloud regions, or deploy on-premises in your own environment, air-gapped if required. The agreement names where data is stored and processed, which gives OSFI third-party reviews and Québec privacy impact assessments the detail they ask for.
What controls help us protect identity and biometric data?
Shufti encrypts data in transit and at rest, applies role-based access and logs every access. Biometric data is used only with the customer's express consent, limited to what verification needs and deleted on your schedule, in line with the Privacy Commissioner's guidance and Québec's biometric rules.
Can we configure different retention periods for different Canadian licences?
Yes. Retention is set per client, licence and record type, so each record runs its five-year clock from account closure, the last transaction or record creation, as section 148 of the PCMLTF Regulations requires. Legal holds pause deletion when an authority requests records.
What does Shufti provide when our compliance team needs to file a report with FINTRAC?
Shufti's case file holds the customer's verified identity, screening results, transaction history, alerts and analyst notes in one place. Your team exports a report-ready bundle and files the suspicious transaction, large cash or virtual currency report through FINTRAC's web system or API.
Can we add verification checks without rebuilding our onboarding journey?
Yes. The AI Journey Builder adds or reorders checks such as credit file verification, NFC or address verification without code changes. Routing rules send customers to different checks by province, product or risk tier, so a Québec customer can complete capture in French.
How does Shufti make verification queries easier for our customer support team?
Every decision is shown in the back office with the reason, the failed check and the captured evidence. Support teams can tell a customer exactly what to fix, such as a glare-covered licence or an expired PR card, and escalate disputed results to compliance.
Let’s Build Trust Into Your Business
1B+Verifications Processed
240+Regions Actively Processed
99.7%Accuracy Rate
Samer Al Tamimi
CEO of Safwa Bank
“We take our client’s privacy very seriously and always look for new innovative solutions to ensure a safe banking experience. Working with Shufti feels like a breath of fresh air, as their 100% in-house tech keeps our customer’s data free from vulnerabilities and fully safe and protected.”
Trusted. Compliant. Certified
Explore Shufti For Your Business
Get a personalised demo from our experts.
PROVEN PLAYBOOKS
Explore Practical KYC & AML Resources
16 April, 2026
Document Verification: North America
FinCEN has warned that AI-generated IDs are getting past verification checks. How Shufti's document checks keep North American onboarding ahead of fraud and regulators.
Regional Brief
