AI & Lending

The polite version of a supervisory letter

On July 13, OSFI posted a technology-risk bulletin titled Generative and Agentic Artificial Intelligence: Implications for Technology, Cyber Security, and Operational Resilience. The regulator's messaging positions it as "sound practices" grounded in the existing B-13, E-21, and B-10 guidelines, and technically, that framing is correct; no new legal duty came into force that day. Practically, the bulletin reads like the polite Canadian version of a supervisory letter: here are the questions we are going to start asking; here are the answers we would like to hear.

The moat moved. Most lenders have not noticed yet.

On July 7, Scotiabank, Sun Life and TELUS teamed up with Lightworks to launch the AI Consortium, a shared initiative to build and permanently own the enterprise AI control infrastructure that Canadian regulated institutions actually need. The flagship program is called the Agentic Control Plane; it is already running in production, processing more than 2 trillion tokens per month, and delivering regulatory-grade auditability across every model, agent, user and inference pipeline in scope.

The macro renewal-wave story has been told for three years. This week it stopped being macro. The Bank of Canada's 2026 Financial Stability Report put the final wave of pandemic-era fixed mortgages in one clean number: about 12% of all outstanding Canadian mortgages, the last cohort of five-year fixed loans originated at 2020 to 2021 lows, will renew over the next 12 months at an average payment increase of about 15%. And the same report estimates that roughly 4% of 2027 renewers nationally, and about 9% in the Toronto area, may not qualify to refinance at current rates and home values. Those borrowers cannot shop the market for a better rate. Their only route to a new term is signing what their existing lender offers.

Finance Canada pre-published the proposed Consumer-Driven Banking Regulations in the Canada Gazette, opening a 60-day public comment period that closes August 26. The Regulations operationalize the Consumer-Driven Banking Act, which received Royal Assent in March, and represent the first concrete operational rulebook under the framework Canadians have been waiting for since 2019. The same day, proposed amendments to the Financial Consumer Protection Framework Regulations were pre-published for a 30-day comment period, operationalizing the Bank Act anti-fraud amendments from Bill C-15.

In seventy-two hours, OSFI made two announcements that, taken together, reshape the competitive structure of Canadian lending for the rest of the decade. On Wednesday, June 17, the regulator confirmed that its Streamlined Framework launches on June 25, creating a faster, more predictable path for provincially regulated credit unions to continue operating as federal credit unions and for fintech “innovators” to become federally regulated deposit-takers. On Friday June 19, OSFI cut the Domestic Stability Buffer to 3.0% from 3.5%, the first move in three years, freeing approximately $74 billion in excess capital across the Big Six and supporting up to $673 billion in additional risk-weighted asset capacity. One regulator. One week. Two levers are pulled in opposite directions, both pointing at the same conclusion.