OSFI E-23 · AMF guideline · Founding Cohort
Five Canadian financial institutions. Two intakes before May 1, 2027. An Appendix 1 record for every model, risk ratings that show their provenance, and write-once evidence that verifies offline, at a price a risk department can approve on its own authority.
Seats are confirmed in the order calls are booked · partnerships@pulseai.now
The fee
A fixed fee a risk department can approve on its own authority, so the procurement cycle is not the longest part of the project. Two sizes, nothing hidden in either.
Small institutions
CAD 29,000
Federally regulated institutions under about CAD 10 billion in assets, small insurers, and fraternals.
Mid-size institutions
CAD 59,000
Category I deposit-taking institutions and mid-size insurers.
Not sure which applies? Tell us your asset size and we will say which.
delivered as a service
PulseAI is delivered as a service. There is no software to install, no servers to run, and none of the cost of operating a self-hosted platform. Every capability shipped after you join, including Microsoft 365 discovery, reaches your tenant on release with no upgrade project, so your governance keeps pace as AI adoption spreads through your workloads.
Ninety days
What PulseAI does on these days is already in the product. What your institution does is name the owners and gather the facts; the pace follows from that.
Day 1
Your tenant is live in Canada. E-23 is activated by your administrator, the AMF crosswalk is in hand where it applies, and we walk your team through the readiness kit.
Day 30
Each model carries the six minimum Appendix 1 attributes, vendor models included, with the data processing agreement status recorded on each one.
Day 60
Risk ratings with recorded assessments. The first review cycle recorded. The eleven additional Appendix 1 attributes populated. Health findings worked.
Day 90
The first sealed evidence bundle is cut and verified offline by your institution. The readiness view is reviewed with its named gaps and the "what remains yours" list.
Continuity
A supervisory record has to outlast any vendor. These are the terms, in plain words.
Due diligence
E-23 ties vendor models to Guideline B-10, and PulseAI is a third party in your framework. A security package is available under NDA for your review: architecture and hosting, the control catalog, subprocessors, the data processing agreement, incident and vulnerability handling, and business continuity.
Request it at security@pulseai.now. The public posture, the published signing keys and the verification steps are on the trust page.
What we ask
Three things we need from you to make the cohort work.
use
Register the models, run the assessments, certify the attestations. The records have to be yours, produced by your process.
feedback
One conversation a month on what is working, what is not, and what the next intake should see fixed.
reference
After you approve the wording, we may say your institution is a customer. Logo and quote, not numbers, unless you choose to share them.
What PulseAI does not do. PulseAI does not perform independent model validation. Whether a model carries non-negligible risk remains your institution’s judgment. PulseAI organizes the evidence and makes the gaps visible, and an E-23 mapping, readiness view or report is not a regulator’s approval or proof of compliance on its own.
Operating in Québec? One cohort covers both guidelines. The AMF guideline on the use of artificial intelligence takes effect the same day, the same inventory serves both, and the AMF crosswalk is part of the walkthrough. See the AMF crosswalk →
Take a seat
Seats are confirmed in the order calls are booked. Twenty minutes is enough to say which fee applies, which intake fits, and whether the ninety days are realistic for your model population.
No commitment required · partnerships@pulseai.now