advisoryaicontact
Review Readiness

don'twaitforthereviewertofindthegaps.wefindthemfirst.

Most MSBs treat the effectiveness review as a checkbox exercise — hire a reviewer, hope for the best, scramble to fix whatever comes back. The smarter approach: identify and close the gaps before the reviewer walks in.

therisk.

Reactive remediation means extended timelines, a second round of review costs, and the possibility that your bank sees deficiencies before you've had a chance to fix them. Programs that haven't been formally reviewed since registration are almost certainly deficient by current standards.

  • Policies that don’t reflect how your business actually operates today
  • Risk assessments that haven’t been updated since initial registration
  • Training records that show a one-time event from two years ago, not ongoing development
  • Missed or incomplete FINTRAC reports that a reviewer will flag immediately
  • Record keeping gaps that violate the five-year retention requirement

whatreadinesslookslike.

An internal pre-review — a gap analysis against what FINTRAC examiners and external reviewers actually look for. Ideally started 2\u20133 months before your review deadline.

Policy & procedure review

Are your written policies up to date with current PCMLTFA requirements? Do they reflect how your business actually operates, or are they boilerplate from when you registered?

Risk assessment validation

Is your risk assessment documented, current, and reflective of your actual business activities, products, clients, and geographies?

Training & reporting audit

Can you demonstrate that all relevant staff have been trained on an ongoing basis? Are your LCTRs, STRs, and EFTRs being filed correctly, on time, and with complete information?

Gap remediation

We close the gaps before your formal review — policy updates, procedure changes, training gaps, and reporting fixes. Your formal review is cleaner, faster, and cheaper.

whopreparesyou.

has managed the effectiveness review process at a publicly listed crypto company and knows what reviewers look for from the inside. led the first external compliance effectiveness review at Peloton Technologies. Together they de-risk the review process — not just conducting it, but making sure you pass.
CPACFACAMS
Luke ThibodeauCPA · CFA · CAMSFounder and CEO

Luke is a finance and compliance operator who works hands-on with bitcoin-native companies, fintechs, and MSBs as a fractional CFO and CCO through Rockwell Advisory Group. As former CFO & CCO of Bitcoin Well (TSXV:BTCW), he built and ran the finance, compliance, and governance functions across a publicly listed, multi-entity crypto company from the ground up.

Today he brings that same operational depth to clients navigating treasury management, FINTRAC compliance, financial reporting, and corporate governance. Whether it's standing up a compliance program for a new MSB, managing multi-entity consolidations, or advising on AI strategy through Rockwell AI, Luke operates as an embedded member of the team rather than an outside advisor. He also founded Comply+, a RegTech platform automating FINTRAC reporting for Canadian MSBs, born directly from the pain points he encountered building compliance workflows by hand.

Charles KlineCAMSHead of Compliance

Charles leads compliance and risk for Rockwell Advisory Group, helping fintechs, MSBs, and payments companies build AML and KYC programs, tighten onboarding and monitoring, and stay aligned with FINTRAC and Canadian regulatory expectations. CAMS-certified, he works as an embedded operator: policies, controls, training, audit readiness, and the day-to-day execution that backs them up.

Previously he served as Compliance Officer and Director of Risk & Compliance at Peloton Technologies, running the enterprise AML program (including FCAC and RPAA), leading the RPAA roll-out for a large organization, training analysts on KYC, sanctions, and FINTRAC reporting, leading the first external Compliance Effectiveness Review, and rebuilding onboarding for FINTRAC KYC. Before that he was Head of Underwriting & Risk at Orchard Technologies, building PayFac-ready underwriting and AML frameworks and automated onboarding from early stage through Global Payments partnership. At Lightspeed Commerce (Payments), he scaled underwriting from a solo function to a global team of twenty across North America, EMEA, and APAC while keeping fraud losses below industry benchmarks.