The full compliance documentation suite the PCMLTFA requires, built around how your business actually operates rather than dropped in from a template.
Every regulated business in Canada must have a documented AML/ATF compliance program. The Act sets out five required elements: an appointed compliance officer, written policies and procedures, an enterprise-wide risk assessment, an ongoing training program, and the two-year effectiveness review. Missing or generic documentation on any one of them is a finding waiting to happen.
C&G designs and writes programs that are regulatory-grade and practical to operate. That distinction matters. A policy manual no one in the business can follow produces exactly the gap between documented and actual practice that examiners look for. We write to the way your onboarding, payments, and escalation actually work.
Whether you are a first-time registrant building from nothing or an established entity replacing a framework that has drifted out of date, the deliverable is a complete, defensible documentation set built for your business, not a template with your logo dropped into the header.
We map your products, delivery channels, customer segments, geographies, and third-party relationships. The risk assessment is built from this, not retrofitted to it.
A documented, defensible methodology producing inherent risk ratings, control effectiveness ratings, and residual risk by category, with the reasoning shown.
The full documentation suite, drafted to your operating model and to current FINTRAC guidance, with clear ownership at every control point.
We walk the draft through with your compliance officer and operational leads to confirm every procedure is one your team can actually execute.
Final documentation, a training curriculum keyed to the program, and a board-ready summary of what has been put in place and why.
Tell us what you do and where. We will scope the documentation set your registration actually requires.
