FINTRAC · PCMLTFA
AML / KYC Disclosure
How Vault meets its obligations under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act.
Registration
Vault operates as a Money Services Business (MSB) registered with FINTRAC. Our compliance program is overseen by a designated Chief Compliance Officer.
Customer due diligence
We verify every user's identity using a government-issued photo ID and a real-time biometric liveness capture. Elevated tiers may require SIN, address confirmation, and source-of-funds attestation.
Ongoing monitoring
The Sentinel Risk Engine continuously scores every load, transfer, and card authorization for velocity spikes, geolocation anomalies, and merchant risk. Suspicious activity is investigated and reported to FINTRAC where required.
Record keeping
Identity documents, transaction records, and risk decisions are retained for at least five years, in encrypted Canadian data storage.
Sanctions
We screen users and counterparties against OSFI consolidated lists and the UN sanctions list on onboarding and on an ongoing basis.
This document is app-owner content maintained by Vault to answer common questions. It is not legal advice and does not create a certification. Contact privacy@getvaultapp.app for the authoritative version.