Security & Compliance

Built for regulators, not around them.

This page states exactly where our registration stands, how funds are held, what we check before a transfer moves, and what we do with your data. If something here is unclear, that is a defect — tell us.

FINTRAC MSB
Registered · Pre-launch

MSB registration no. N300002230. Registration is not a licence or an endorsement.

Incorporation
ABCA · Alberta

Coynitt Canada Inc., Corporate Access No. 2027982756.

Settlement
Coinbase Base L2

Designed so every transfer, contribution and payout is recorded on-chain.

Your data
Not sold

We do not sell personal information or run advertising against it.

Regulatory Standing

What is registered, what is not yet, and what that means today.

RegistrationWhat it coversStatus
FINTRAC MSBRegistered activities (FINTRAC MSB registry): Money Transferring; Virtual Currency.Registered · Pre-launch
Alberta ABCACorporate registration; Coynitt Canada Inc., Corporate Access No. 2027982756.Registered
CRA business numberTax registration for the operating company (BN 796629178).Registered
Payout partnersEach local payout partner must hold its own licence in its market. Our due diligence on each partner is under way.In diligence
Provincial money transmissionQuébec has its own regime; Coynitt is not registered under it.Not registered
Coynitt Canada Inc. is registered with FINTRAC as a money services business (MSB registration no. N300002230). Registration is not a licence or an endorsement. Coynitt is not yet open to the public and is not accepting customer funds. Launch is subject to further regulatory requirements, including registration with the Bank of Canada under the Retail Payment Activities Act. No launch date has been set.
How Funds Are Held

Coynitt is not a bank.

Funds in flight sit in Coynitt-controlled addresses and in smart contracts that Coynitt's systems sign for. Coynitt is not a bank and customer funds are not covered by CDIC deposit insurance.

Not lent out

We do not lend, stake or invest customer funds. There is no yield product.

Not deposit insurance

Coynitt is not a bank. Customer funds are not covered by CDIC.

AML & KYC Programme

One verification, then checks the user never has to think about.

The controls below are being built and tested and are not yet live.

01
Identity verification

Government-issued photo ID check at signup.

02
Sanctions screening

Sender, recipient and beneficiary screened against Canadian, UN, UK and US lists before a transfer routes.

03
Source of funds

Requested where amounts or patterns require it, with clear thresholds rather than arbitrary holds.

04
Transaction monitoring

Behavioural monitoring for structuring, mule patterns and corridor anomalies, reviewed by a human before any account action.

05
Reporting

Large cash, large virtual currency, EFT and suspicious transaction reports filed as Canadian law requires.

06
Record keeping

Verification records and transaction detail retained for the statutory period, then deleted on schedule.

Technical Security

Keys, contracts and the parts we deliberately keep boring.

Settlement runs on Coinbase Base L2. Contracts are written to be small and readable rather than clever. Coynitt's contracts run on a test network today.

Coynitt does not publish the internals of its routing intelligence.

Settlement layerCoinbase Base L2.
Contract changesContracts are versioned. Coynitt's contracts run on a test network today.
AuditsIndependent contract review before mainnet launch; findings and fixes published.
Access controlBeing built: least-privilege internal access, two-factor sign-in for admin tools, and a log of admin actions.
RecoveryAccount recovery by identity verification, with a cooling-off period on new payout destinations, is being built.
Your Data

Kept because the law says so, not because it is useful to us.

We hold identity documents and transaction records for the period Canadian AML law requires, encrypted at rest and in transit. We do not sell data, we do not run advertising, and we do not share transaction detail with third parties except where a law or a lawful order requires it.

If you are in the UK or EU, UK GDPR or GDPR rights apply; Canadian residents are covered by PIPEDA. Access, correction and erasure requests go to one address and are answered inside thirty days.

What we holdIdentity documents, verification results, transaction records, device and session metadata.
Where it livesWith our cloud provider and our identity-verification provider, including on servers in the United States. Encrypted at rest and in transit.
How longFive years after the last transaction or account closure, as Canadian AML law requires.
Who sees itOur compliance function, our verification and payout partners for their part, and authorities under lawful order.
What we never doSell data, run advertising against it, or use transaction detail for anything but running and policing the service.
Your rightsAccess, correction, portability and erasure where retention law allows — answered inside thirty days.
Responsible Disclosure

Found something? We would rather hear it from you.

Report a vulnerability to security@coynitt.ca with enough detail to reproduce it. We acknowledge inside one business day, keep you updated while we fix it, and credit reporters who want the credit. No legal action against good-faith research.

Vulnerability reportssecurity@coynitt.ca
Compliance and AMLcompliance@coynitt.ca
Privacy requestsprivacy@coynitt.ca
Questions

The ones a regulator asks, and the ones a mother asks.

Can I use Coynitt today?

Not yet. Coynitt Canada Inc. is registered with FINTRAC as an MSB, but we are not yet open and are not accepting customer funds. Further regulatory steps remain, including Bank of Canada registration under the Retail Payment Activities Act. Join the waitlist and we will email you before invitations open.

Is Coynitt covered by deposit insurance?

No. Coynitt is not a bank and customer funds are not covered by CDIC.

Why does a payment app need my ID?

Canadian law requires a money services business to verify who is sending, and sanctions screening only works against a verified name. One verification covers Transfers, Rounds and Harambee.

What happens if Coynitt shuts down?

Coynitt is not yet open to the public and is not accepting customer funds. Further regulatory steps remain, including registration with the Bank of Canada under the Retail Payment Activities Act.

Will you freeze my transfer?

Only where law requires a hold or monitoring flags a genuine risk. You will be told there is a review, and a human reviews it — not only a model.

Registered with FINTRAC as an MSB · Pre-launch
Incorporated under the Alberta Business Corporations Act
Settlement recorded on Coinbase Base L2
Read the compliance detail →
Want First Access?

Be the first through the door.

Coynitt Canada Inc. is registered with FINTRAC as an MSB, but we are not yet open and are not accepting customer funds. Further regulatory steps remain, including Bank of Canada registration under the Retail Payment Activities Act. Join the waitlist and we will email you before invitations open.

#BecauseLoveShouldntCostExtra