Pilot release — free for early users

Cloud compliance, scoped to where you actually operate.

RegLens identifies which financial-services regulations apply to your business based on where you operate, where your data lives, and who your customers are. Then it scores your readiness against all of them — in one self-serve assessment.

No credit card required during the pilot. Early users will be grandfathered when paid plans launch.

We tell you what applies

Tell us where you're incorporated, where your customers are, and where your data lives. RegLens identifies every applicable regulation across Canada, the US, the Caribbean, and the EU — automatically, in under five minutes.

Answer once, scored everywhere

The same governance question is asked across OSFI, NYDFS, CIMA, and DORA. You answer it once. Your single response is scored against every regulation that applies to you, with regulator-specific references in the output.

Outputs your board can read

Export a polished PDF assessment report, a one-page board summary suitable for Risk Committee, and pre-populated Microsoft Word policy templates aligned to your specific gaps. Built for governance, not just compliance theatre.

Regulatory coverage

Coverage across four regions.

liveFully assessable todayin developmentQuestionnaire being builtapplicability detectionIdentified as applicable; full assessment coming

Region

Canada


  • OSFI B-13live

    Technology and Cyber Risk Management

  • OSFI B-10live

    Third-Party Risk Management

  • PIPEDAlive

    Personal Information Protection

  • CSA NI 31-103in development

    Cybersecurity Expectations

  • Quebec Law 25applicability detection

    Quebec Privacy Act

3 live · 1 in development · 1 applicability detection

Region

Caribbean


  • CIMA SoGlive

    Statement of Guidance on Cybersecurity (Cayman Islands)

  • BMA OCRMlive

    Operational Cyber Risk Management Code (Bermuda)

  • Bahamas / BVI / Jamaicaapplicability detection

    Regional applicability detection

2 live · 1 applicability detection

Region

United States


  • NYDFS Part 500live

    Financial Services Cybersecurity

  • GLBA Safeguards Rulein development

    FTC Safeguards 2023 amendments

  • FFIEC IT Handbookin development

    Federal banking IT examination

  • SEC + state privacyapplicability detection

    SEC cyber rules, CCPA/CPRA and others

1 live · 2 in development · 1 applicability detection

Region

European Union & UK


  • DORAin development

    Digital Operational Resilience Act

  • GDPRapplicability detection

    General Data Protection Regulation

  • UK FCA / PRAin development

    UK Operational Resilience

2 in development · 1 applicability detection

Customers in scope for multiple regions answer one deduplicated set of questions and receive a per-regulation gap analysis. Add jurisdictions on request — content currency is part of the subscription.

How RegLens works

From sign-up to a board-ready report in under an hour.

1

Tell us about your organisation.

Five minutes. Country of incorporation, operating jurisdictions, customer locations, data residency, and your cloud footprint. RegLens uses these inputs to determine which regulations apply to you.

2

Receive your applicability map.

Get a list of every regulation in scope, with a plain-language explanation of why each applies. Regulations whose assessment content is still in development are flagged separately.

3

Complete one questionnaire.

Around 30 to 90 questions depending on your profile, fully deduplicated across applicable regulations. Each answer is RAG-scored against the requirements of every regulation the underlying control satisfies.

4

Download your reports and templates.

Per-regulation gap analysis, board one-pager, full PDF report, and pre-populated Microsoft Word templates for the controls flagged Red or Amber. Editable, professional, board-ready.

Built for the underserved middle.

Most compliance tooling is priced and designed for tier-1 banks with in-house Governance, Risk, and Compliance teams. RegLens is built for the institutions those tools overlook — credit unions, fund administrators, captive insurers, fintechs, payments firms, and SaaS vendors selling into financial-services customers. If you don't have a dedicated GRC function but you do have regulatory obligations, RegLens replaces six to twelve months of consulting effort with a self-serve assessment you can re-run any time as your business changes.

Trusted by early-pilot organisations across Canada, the Caribbean, and the US

Named customer logos will appear here as pilot users opt in to be referenced.