PulseAI adds OSFI E-23 readiness tools for Canadian banks

PulseAI Now says federally regulated financial institutions can now turn on OSFI E-23 controls inside its platform, build model inventories and preserve governance evidence ahead of the May 1, 2027 deadline. The launch is aimed at helping banks and other lenders document AI and vendor-model risk before the new OSFI model-risk rules take effect.

Why it matters: - OSFI Guideline E-23 takes effect on May 1, 2027, and explicitly treats artificial intelligence and machine learning as models. - Canadian financial institutions now have less than seven months to document model inventories, review records and evidence trails before the guideline applies. - The rule pulls predictive systems, generative AI applications and third-party AI services into model risk management. - Institutions with an October 31 year end are setting the budget for E-23 readiness now.

What happened: - PulseAI Now Inc. announced E-23 readiness capabilities for federally regulated financial institutions on October 7, 2026. - The platform can be activated for E-23, keep an Appendix 1-aligned record for each model and store governance events in write-once evidence storage hosted in Canada. - The company also published a free OSFI E-23 Readiness Kit without registration.

The details: - The E-23 framework can be switched on alongside other frameworks already in use. - E-23 expectations plug into the AI Impact Assessment workflow, with completeness checks on the required evidence questions. - Each model record includes the accountable owner, developer, reviewer, approver, review dates, dependencies, data sources, limitations and approved use cases. - The platform tracks risk ratings with provenance, including who assessed the rating, when the assessment happened and why. - A rating with no assessment on file is labeled as such. - The compliance export includes an OSFI E-23 Model Inventory Appendix that lists the information still missing, model by model. - The Evidence Vault seals certified attestations, approved impact assessments, shadow-AI decisions and weekly governance health reports into write-once storage as they happen. - The storage is encrypted under the institution's own key. - Signed auditor bundles verify offline with standard tools. - Google Workspace discovery surfaces connected AI applications. - An active vendor model without a confirmed data processing agreement is raised as a finding.

Between the lines: - The launch is built around evidence capture at the moment governance decisions are made, rather than after the fact. - That approach shifts the compliance burden from reconstructing records later to maintaining them continuously. - PulseAI draws a line between organizing evidence and making compliance judgments, which remain the institution's responsibility. - The product also extends E-23 review into vendor AI, signaling that third-party tools may create as much governance exposure as in-house systems.

What's next: - Financial institutions preparing for E-23 can use the readiness kit to map the guideline's three outcomes and twelve principles against their current controls. - Boards and risk teams will likely use the remaining transition period to close inventory gaps, validate owners and formalize approvals. - PulseAI says the new controls are designed to surface missing evidence before regulators ask for it.

The bottom line: - PulseAI is trying to turn OSFI E-23 compliance into a live evidence process, not a last-minute document hunt.