Skip to content
AtheronLABS

You're visiting from the United States. Prices are shown in US dollars. Not right?

labs@atheron:~/industries/banking/compliance$ audit --controls --evidence

Bank compliance

Security and compliance built for examiners and auditors.

Banks and credit unions answer to examiners, internal audit and their own vendor risk teams. We build software that passes those reviews: access by role, sealed audit trails, encryption, data kept in Canada, and the documentation a vendor risk review asks for.

Start a projectSee the example projects

// what matters here

What is different in this industry.

01

Built for vendor risk reviews

Architecture diagrams, data flows, control descriptions and penetration test results ready for your vendor risk team, before they ask.

02

Sealed audit trails

Every decision and change recorded in a log nobody can quietly edit, including administrators.

03

Data stays in Canada

Hosting, backups and any service providers in Canadian regions, documented copy by copy.

04

Your certification work, supported

If your institution pursues SOC 2 or ISO 27001, we build to the controls and support the audit; reports come from independent auditors.

// example projects

Priced examples for this service.

Each one is hypothetical, labelled as such, and priced live from our rate card. Open any of them in the estimator and make it yours.

Example projectWeb appMobile app

Commercial loan portal and app

Hypothetical. Not a client, not a result.

// The problem

Business loan applications arrive by email, credit memos are written from scratch, and the borrower calls the branch to find out where their file stands.

// What we would build

A web portal for account managers and credit adjudicators with an iOS and Android app for business owners, carrying the file from application through adjudication and covenant monitoring, connected to the core banking system.

// What is in it

  • Application, document collection and status in the business owner's app
  • A credit memo assembled from the file, not retyped
  • Adjudication workflow with delegated limits and a full audit trail
  • Covenant and reporting reminders after the loan is funded
  • Integration with the core banking system and the credit bureau
  • English and French for borrowers and staff

// Stack

  • Next.js
  • React Native
  • PostgreSQL
  • Core banking integration
  • Credit bureau API
  • AWS Canada

// estimate

Build
≈ US$244,000 to US$374,000, delivered within 41 weeksCAD 347,900 to 532,000
Hosting
≈ US$1,360 a monthCAD 1,940 a month
Support
≈ US$5,010 a monthCAD 7,135 a month

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery
2.9 to 3.4 weeks
Design approved
11.9 to 20.4 weeks
Core features
2.4 to 3.9 weeks
Full build
1.4 to 2.4 weeks
First build on devices
4.4 to 7.9 weeks
Testing and fixes
0.4 to 0.9 weeks
Store submission
0.4 to 0.9 weeks
Security review passed
0.9 weeks
Controls built and evidenced
0.9 weeks
Readiness review
0.9 weeks
Launch
0.9 to 1.4 weeks
Audit support and remediation
0.9 to 1.4 weeks
Observation window (auditor)
52 weeks
Auditor report (SOC 2 Type II)
4 to 8 weeks

Outside our hands, and added to the calendar

App store review
1 week
Core sandbox and credentials from your provider
1 to 4 weeks
Penetration test by your chosen firm
2 to 4 weeks

How it is paid

Deposit 20%
CAD 69,580 to 106,400
Discovery 5.9%
CAD 20,526.10 to 31,388.00
Design approved 5.9%
CAD 20,526.10 to 31,388.00
Core features 4.8%
CAD 16,699.20 to 25,536.00
Full build 3.2%
CAD 11,132.80 to 17,024.00
First build on devices 12.8%
CAD 44,531.20 to 68,096.00
Testing and fixes 1.6%
CAD 5,566.40 to 8,512.00
Store submission 4.2%
CAD 14,611.80 to 22,344.00
Security review passed 6.3%
CAD 21,917.70 to 33,516.00
Controls built and evidenced 6.3%
CAD 21,917.70 to 33,516.00
Readiness review 6.3%
CAD 21,917.70 to 33,516.00
Launch 5.9%
CAD 20,526.10 to 31,388.00
Audit support and remediation 6.8%
CAD 23,657.20 to 36,176.00
Holdback, 30 days after launch (10%)
CAD 34,790 to 53,200
Start from this example
Example projectWeb appAICustom LLM

AML alert triage on your servers

Hypothetical. Not a client, not a result.

// The problem

Transaction monitoring produces a queue of alerts analysts cannot clear, and true suspicious activity waits behind thousands of false positives.

// What we would build

A custom model fine-tuned on the bank's own closed alerts and analyst notes, running on GPU servers in the bank's data centre so customer transactions never leave it, that ranks each alert and explains why for the analyst who decides.

// What is in it

  • A model fine-tuned on your past alerts and how analysts closed them
  • Each alert ranked with the transactions and patterns behind the score
  • The analyst decides and writes the case; the model never files a report
  • Measured against a held-out set of closed alerts before it goes live, and on a schedule after
  • Runs on servers in your data centre, with no data sent outside

// Stack

  • PyTorch
  • Python
  • PostgreSQL
  • Next.js
  • Lenovo GPU servers on premises

// estimate

Build
≈ US$193,000 to US$294,000, delivered within 38 weeksCAD 274,600 to 418,100
Hosting
≈ US$176 a monthCAD 250 a month
Support
≈ US$5,010 a monthCAD 7,135 a month
Hardware
≈ US$47,800 to US$197,000CAD 68,000 to 280,800

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

AI route
Custom LLM
Model running cost
≈ US$176 a monthCAD 250 a month

Timeline by milestone

Discovery
2.9 to 3.4 weeks
Data and evaluation plan
0.4 weeks
Design approved
2.9 to 4.9 weeks
Core features
1.9 to 3.4 weeks
Full build
1.4 to 2.4 weeks
Training
7.4 to 12.4 weeks
Testing and fixes
0.4 weeks
Evaluation and red-teaming
3.9 to 4.4 weeks
Security review passed
3.9 to 4.4 weeks
Launch
0.9 to 1.4 weeks
Production
0.9 to 1.4 weeks

Outside our hands, and added to the calendar

Hardware delivery, after it is ordered
2 to 6 weeks
Core sandbox and credentials from your provider
1 to 4 weeks
Penetration test by your chosen firm
2 to 4 weeks

How it is paid

Deposit 20%
CAD 54,680 to 83,380
Discovery 1.3%
CAD 3,554.20 to 5,419.70
Data and evaluation plan 6.9%
CAD 18,864.60 to 28,766.10
Design approved 1.3%
CAD 3,554.20 to 5,419.70
Core features 4%
CAD 10,936 to 16,676
Full build 2.7%
CAD 7,381.80 to 11,256.30
Training 20.9%
CAD 57,140.60 to 87,132.10
Testing and fixes 1.3%
CAD 3,554.20 to 5,419.70
Evaluation and red-teaming 13.9%
CAD 38,002.60 to 57,949.10
Security review passed 8.7%
CAD 23,785.80 to 36,270.30
Launch 1.3%
CAD 3,554.20 to 5,419.70
Production 7.7%
CAD 21,051.80 to 32,101.30
Holdback, 30 days after launch (10%)
CAD 27,340 to 41,690
GPU time for training and testing, at cost
CAD 1,200. Billed up front, at cost, outside the milestones
GPU server for AI, for the model
CAD 68,000 to 280,800. Billed up front, at cost, outside the milestones
Start from this example

// questions

Questions we get about this.

Can you meet OSFI third-party expectations?

We provide what a third-party risk review asks of a software supplier, and we scope the rest with your compliance team. Whether an arrangement meets a guideline is your institution's assessment.

Will you take part in a penetration test?

Yes. We fix what it finds and retest; the test itself is run by a firm your security team chooses.

Do you hold SOC 2 or ISO 27001 yourselves?

No. We build for them and support our clients' audits.

Back to the industry: BankingAbout the service: Compliance and security engineering

// next

Not quite your project?

Tell us what you have in mind. We will come back to you with a range and the questions that would narrow it. Or book a call and talk it through.

Start a projectBook a call
Security and compliance engineering for banks and credit unions | Atheron Network Labs