Ava — Governed Channel
A private, deal-bound AI workspace for licensed Canadian financial services professionals — mortgage agents, brokers, CPAs, appraisers, insurance brokers, fractional CFOs. The interface is deliberately identical to any modern AI chat tool. The difference is entirely beneath the surface.
01
Model Inventory
02
Usage Logs
03
Data Governance
04
Human Review
The problem it solves
Since September 11, 2025, OSFI Guideline E-23 requires every federally regulated bank to govern every AI model touching their credit files — including models used by broker partners. Professionals who cannot demonstrate governed AI use face restricted lender access. Ava is the infrastructure answer.
Why the UI looks like this
The interface is intentionally familiar. Professionals feel like they are having a conversation, not running compliance software. The governance is structural — built into the relay, the logging layer, and the approval gate — invisible to the user, mandatory by design. The deal is the container. The chat thread is the workspace.
Architecture — three layers
Layer 1 — Frontend
React chat UI
Deal sidebar · top bar · streaming message thread · file composer · approval gate. Browser never contacts Bedrock directly.
Layer 2 — Backend relay
Secure Node.js API
Receives each turn · appends to deal thread · calls Bedrock ConverseStream · writes full interaction log · streams reply to UI. IAM-authenticated.
Layer 3 — AWS Canada
Bedrock ca-central-1
Claude on Amazon Bedrock · S3 governed files · DynamoDB records · Bedrock invocation logging · CloudTrail. Canadian jurisdiction throughout.
Six data objects — complete audit chain
Dealdeal_id · borrower · status
Sessionsession_id · deal_id · model_id
Messagerole · content · bedrock_request_id
Filefile_id · s3_uri · classification
Work Producttype · status · source_message_id
Approval Eventreviewer · reviewed_at · content_hash
OSFI E-23Every AI model touching a bank-bound file must be inventoried, risk-rated, and governed — including models used by broker partners.
OSFI B-10Banks must apply rigorous due diligence and contractual controls to high-criticality third-party arrangements — including large broker networks.