CitaTrac
For small Canadian MSBs and PSPs

A compliance department for the founder who is also the compliance officer.

CitaTrac keeps your FINTRAC compliance program running: the written policies, the risk assessment, client checks, monitoring, reports and training. Every alert explains which rule fired, why, and where FINTRAC says so. You make the decisions in about an hour a week.

Request early access See what it covers

In development. CitaPay, our own registered MSB, runs on it first.

Report required ALERT-2026-0412 · example

Two transfers from one client total CAD 10,400 in 24 hours

2026-10-27 10:14 · TX-8831 · AED corridorCAD 6,200.00
2026-10-27 16:52 · TX-8840 · AED corridorCAD 4,200.00
Total within 24 hoursCAD 10,400.00
Why this fired. Transfers of CAD 10,000 or more sent within 24 hours by the same person count as one. Together these two cross the threshold, so an electronic funds transfer report (EFTR) is due within 5 working days. Source: FINTRAC guidance, Reporting electronic funds transfers; the 24-hour rule
AI draft · needs your approval EFTR prepared from TX-8831 and TX-8840. Beneficiary address is missing on TX-8840.
Decision by the compliance officer Add reason Approve report
What an examiner checks

Filing tools cover the reports. A FINTRAC examination checks the whole program.

An examination looks at five parts of your compliance program and asks whether each decision was made and written down. CitaTrac carries all five.

Compliance officer

"Who is responsible, and can they show their work?"

You stay the named officer. Every decision is logged with who made it, when and why.

Written policies

"Are your policies current for what you actually do?"

Policies are generated from your own products, clients and corridors, and re-issued when a rule or your business changes.

Risk assessment

"How did you rate this client and this corridor?"

Risk scores that show their inputs, so you can explain a rating in a sentence.

Training

"Has everyone been trained, and on what?"

Courses for frontline staff and the officer, with a training log that goes straight into the examiner's pack.

Two-year review

"When was the program last reviewed for effectiveness?"

An evidence pack and gap list your independent reviewer can work from, so the review costs less.

Under that sit the daily jobs: client identification, transaction monitoring, the 24-hour rule, travel-rule data, and the EFTR and STR reports. CitaTrac prepares validated report data for you to submit in FINTRAC's portal. Direct submission through FINTRAC's API is planned.

What small firms pay today

Today it takes three vendors. CitaTrac Starter is one subscription.

A small MSB usually pays for a filing tool, a part-time compliance consultant and a policy written once in Word. The policy goes stale, and nobody can explain last March's alert decisions.

Published entry prices, CAD per year, October 2026. The consultant's program drafting fee ($5,000 to $25,000, one time) is not included.

Two regulators

FINTRAC and the Bank of Canada want the same facts about you. Enter them once.

Since 8 September 2025 a payment service provider has to be registered with the Bank of Canada under the Retail Payment Activities Act (RPAA) before it operates. Most of what the Bank asks for is already in your FINTRAC program.

FINTRAC

MSB registration and reporting

  • Compliance program and risk assessment
  • Client identification and records
  • EFTR and STR reports
  • Changes to your registration

PCMLTFA · registration renews every 2 years

Bank of Canada

RPAA registration and annual report

  • Payment functions you perform
  • Operational risk and incident response framework
  • Safeguarding of client funds, reconciled daily
  • Annual report, due 31 March

RPAA · application fee $2,500

CitaTrac prepares the application pack and a checklist for each field. You submit it and sign the attestation yourself in the Bank's PSP Connect portal. The legal opinion on your trust account is signed by a lawyer.

How it is built

The software drafts. A named person decides.

Nothing is filed without you

AI drafts reports and explanations and marks them as drafts. Each one records who approved it, when, and what they changed.

Rules you can read

Alerts come from written rules that point to FINTRAC's guidance. No black-box score ever triggers a report.

Your data stays in Canada

Client and transaction data is stored in Canada. Identity documents are never sent to an AI model.

History an examiner can replay

Decisions and program changes are never overwritten. A correction is a new entry, so the record shows what you knew and when.

Planned pricing · CAD

A flat monthly price. You don't pay per transaction.

Prices are what we plan to charge at launch and may change before then.

Starter

Most firms
$199a month

One MSB, founder as officer, under 25 FINTRAC reports a month.

  • Living compliance program
  • Client check checklist and risk scoring
  • Monitoring with explained alerts
  • FINTRAC report preparation
  • Training log, help and walkthroughs
Request early access

Growth

$499a month

An MSB or PSP with staff, up to 150 reports a month.

  • Everything in Starter
  • RPAA module: registration record, incident log, safeguarding register, annual report
  • CSV and API import
  • Staff roles and audit trail
Request early access

Partner

$999a month

Compliance consultants and accountants who look after several firms.

  • Up to 10 client firms on Growth
  • Reports under your own brand
  • One dashboard across clients
Talk to us
RPAA registration pack$1,500 one time

Guided application data, risk and incident framework, safeguarding framework, and a brief for your lawyer.

Effectiveness review workbook$2,500 every 2 years

The evidence pack and gap list your independent reviewer needs.

Sanctions and PEP screeningprovider cost + 20%

Through a licensed screening provider, billed at their cost plus 20%.

Early access

Pilot places open in 2027

We are taking a small number of FX, remittance and payment firms as pilots. Firms usually come to us when:

  • their bank asks to see their compliance program
  • FINTRAC has scheduled an examination
  • they are applying for RPAA registration
  • the founder has just become the compliance officer
An estimate is fine. It helps us pick the right tier for you.