DoBusiness.com™

1. Who regulates DoBusiness.com™, and under which frameworks?

DoBusiness.com™ is a Member of Payments Canada and is registered with the Bank of Canada as a Payment Service Provider (PSP) under the Retail Payment Activities Act (RPAA). We are a FINTRAC-registered Money Services Business (MSB) and a member of the Ombudsman for Banking Services and Investments (OBSI). We operate under Canadian federal and provincial privacy law, including PIPEDA and Quebec Law 25.

2. Where does our data live, and is it exposed to the U.S. CLOUD Act?

All production data is stored, processed, and backed up inside Canada, in private-cloud environments co-located across Canadian regions. DoBusiness.com™ does not rely on U.S. hyperscaler public cloud for production workloads, does not replicate production data outside Canada, and is not a U.S. “electronic communication service” or “remote computing service” provider. The U.S. CLOUD Act does not apply to DoBusiness.com™. Data residency is contractually guaranteed and evidenced in our SOC 2 Type I report.

3. How do you integrate without touching our core banking systems?

DoBusiness.com™ operates as an out-of-band verification layer. We verify payment instructions, counterparties, and documents before a payment file is ever generated in your core. Integration options include (i) a secure API consumed by your front-office or payment origination system, (ii) a file-drop / SFTP handshake, or (iii) a standalone web product requiring no integration. No agent, plug-in, or code is deployed inside the bank’s core. ISO 20022–native; structured-address ready ahead of the November 2026 deadline.

4. How is liability allocated if a verified instruction later proves fraudulent?

Liability is allocated contractually and is transparent to the bank’s risk committee. DoBusiness.com™ carries professional liability and cyber coverage. Our verification is evidence-generating: every instruction carries an immutable audit record (DoSignature™ + DoDocs™) that materially improves the institution’s defensibility in APP-fraud, BEC, and misdirected-wire disputes. DoBusiness.com™ never takes custody of customer funds — DoMoney™ is decentralized; clients control their own accounts — which removes a full category of custodial and commingling liability from the risk perimeter.

5. What are your security certifications, and what is the audit cadence?

DoBusiness.com™ is PCI-DSS Certified and holds SOC 2 Type I. SOC 2 Type II, ISO 27001, and FIPS 140-3 are in progress with audits scheduled. Our DoStopFraud™ verification engine is Patent-Pending.

6. How do you handle privacy, consent, and cross-border data transfers?

DoBusiness.com™ complies with Canadian privacy law, i.e. PIPEDA and Quebec Law 25. Breach-notification obligations meet or exceed the 72-hour federal standard.

7. What is your track record, and who is already live on the platform?

DoBusiness.com™ has processed more than $24 billion across a decade in production, representing over 40,000 verified institutional transactions. Live deployments include Teranet Inc. (Ontario’s Electronic Land Registration System, white-labeled as Teranet Undertakings) and Stewart Title (StewartPAY, powered by DoMoney), with direct connectivity to Canada’s Tier 1 Banks. References are available under NDA on request to qualifying counterparties.