Totara

Regulatory, financial-crime & prudential automation

Compliance, computed — not attested.

Totara maps every regulation a bank faces to a control, and runs most of them automatically from your live data — leaving only the exceptions for a human. Runs over the core you already have, or on ours.

Totara — the compliance layer for banks, on your live data

01 — Regulation & Governance

Every regulation, mapped to a control.

Every regulatory obligation is mapped to a policy, every policy to a control, and every control to the part of the platform that runs it — automatically, wherever the rule allows. It runs as a layer over the core you already have, or as part of the complete Totara stack; the obligations, controls and evidence are identical either way.

A live governance dashboard shows what's assured — and what still needs a person, as a visible worklist, not a binder of attestations after the fact.

Regulation & compliance

Built in. Across every market your customers bank.

499

regulations

4,155

obligations mapped

139

regulators

2,844

automated controls

17 markets + global standards

NZ New Zealand 84 regulations
AU Australia 74 regulations
EU European Union 69 regulations
UK United Kingdom 64 regulations
US United States 69 regulations
CA Canada 58 regulations
IE Ireland 24 regulations
PAC Pacific · 10 markets 20 regulations
◍ Global standards Basel · FATF · ISO · NIST · PCI

Per-market breakdown

NZ New Zealand RBNZ · FMA · MBIE · DIA · IRD
Regulations 84
Obligations 994
Automated controls
63%
AU Australia APRA · ASIC · AUSTRAC · ATO · OAIC
Regulations 74
Obligations 944
Automated controls
60%
EU European Union EBA · ECB-SSM · EC
Regulations 69
Obligations 322
Automated controls
76%
UK United Kingdom PRA · FCA · ICO · HMRC
Regulations 64
Obligations 294
Automated controls
66%
US United States Fed · OCC · FDIC · FinCEN · CFPB
Regulations 69
Obligations 287
Automated controls
81%
IE Ireland Central Bank of Ireland · DPC · Revenue
Regulations 24
Obligations 250
Automated controls
72%
CA Canada OSFI · FINTRAC · FCAC · CRA
Regulations 58
Obligations 230
Automated controls
72%
PAC Pacific · 10 markets RBF · CBS · NRBT · RBV · BPNG + APG
Regulations 20
Obligations 363
Automated controls
93%
Global standards — 37 regulations from the global standard-setters (Basel III / BCBS 239, FATF, ISO 27001, NIST) underpin every market above. A further 471 obligations apply across both New Zealand and Australia (trans-Tasman).

Every obligation, mapped

Obligation → policy → control, with an automated control wherever the rule allows.

Runs over your core, or ours

The governance layer over the core you already have — or the complete Totara platform.

Honest by design

What's assured is assured; what's yours is a visible worklist, not a hidden gap.

Global coverage, local rules

Basel III · FATF · UK PRA/FCA · EU CRR/CRD · US Fed/OCC/FinCEN · OSFI · CBI · NZ DTA · APRA CPS 230.

02 — Financial Crime

Only deal with the real exceptions.

Financial crime runs against the same live ledger and party data as everything else — not a separate vendor or feed. Transactions are monitored against typologies and behavioural models; parties are screened against sanctions and PEP lists at onboarding and as they transact; and every alert flows through one workflow — triage, investigate, dispose — with an immutable evidence trail behind each decision.

Financial crime · built in

Only deal with the real exceptions.

Transaction monitoring

FATF typologies plus behavioural scoring — tuned and back-tested to cut false positives.

Sanctions & PEP screening

Parties screened at onboarding and as they transact, with adjudication built in.

KYC & CDD

Risk-tiered due diligence, with periodic review scheduled automatically.

Case management

One queue — triage, investigate, dispose — with evidence attached to every decision.

Monitor Detect Investigate Dispose immutable, content-hashed evidence behind every decision

Cleared automatically. The platform assesses every transaction and party against the same live data — and surfaces only the exceptions that need a human.

Transaction monitoring

FATF typologies plus behavioural scoring, with false-positive tuning and back-testing.

Sanctions & PEP screening

Parties screened at onboarding and in-flight, with adjudication built in.

KYC / CDD, risk-tiered

Deterministic tier assignment, automatic periodic review, EDD where the risk warrants it.

Alert → case → disposition

One workflow, one audit trail, evidence attached to every decision.

03 — Prudential & Analytics

The numbers your regulator asks for — already run.

The calculations that cost a smaller institution a whole department — liquidity, capital and risk-weighted assets, credit loss, interest-rate risk — are computed nightly from your live positions, not attested after the fact. The regulatory returns build themselves from the same numbers, with lineage back to source data and sign-off before anything is filed.

Prudential & analytics · computed nightly

A department's worth of calculation, run every night.

Liquidity

LCR · NSFR

APS 210 · BS13

Capital & RWA

CET1 · Tier 1 · Total

Basel III · APS 110/112/113

Credit loss

ECL · staging

IFRS 9

Interest-rate risk

EVE · NII

IRRBB

Stress testing

scenario · reverse-stress

ICAAP · APS 220

Prudential returns

built from live data

RBNZ BS · APRA ARS

Computed from your live positions on a Snowflake-native analytics core — one governed set of numbers behind every dashboard and board pack. Returns are assembled automatically, with cell-level lineage and sign-off before filing.

The prudential set, computed

LCR/NSFR, capital/RWA, ECL (IFRS 9), IRRBB (EVE/NII), stress and reverse-stress.

Returns that build themselves

RBNZ BS / APRA ARS and local equivalents, cell-level lineage, sign-off before filing.

Snowflake-native analytics

One governed set of numbers behind every dashboard and board pack.

A department, run as a calculation

The work that used to need a team of analysts, spreadsheets and consultants.

04 — The Full Platform

Take a layer. Or take the whole bank.

Everything Totara does is built as one system — core ledger, payments, KYC and AML, credit, analytics, and a best-in-class customer app, sharing a single data model and one governance layer. Start with just the governance layer over your existing core, or take the whole platform, app included, not a separate purchase.

Totara customer app alongside the platform's modular building blocks

Modular by design

Take just the governance layer, or the complete platform — your call, your timeline.

One integrated system

Core, payments, KYC/AML, credit, analytics and app, designed and built together.

Customer app included

Best-in-class mobile banking as standard, not a separate purchase.

The whole bank. One platform.

Core, payments, KYC/AML, credit, risk & analytics, the customer app and back office — designed as one system, not assembled from vendors.

Core ledger Payments KYC & AML Credit Risk & analytics Customer app Back office APIs

Shared data model · Event bus · Governance layer · One contract · One upgrade

or take the parts you need

Governance & Analytics

The compliance and insight layer — runs on any core, yours or ours.

  • Live governance dashboard
  • Regulatory reporting
  • Risk monitoring & controls

Available standalone

Add to the package

Core Banking

The engine — ledger, money movement, onboarding, lending.

  • Core ledger & accounts
  • Payments processing
  • KYC/AML · credit decisioning

Available standalone

Add to the package

Customer App

Best-in-class mobile banking — ship it on its own.

  • Modern mobile app
  • Digital onboarding
  • Notifications & servicing

Available standalone

Add to the package

Common ways to start

Governance & Analytics Governance + Core The App All three — the complete platform

One data model and event bus underneath every module — so start with one, add the rest later with no re-integration project.

05 — Transparent Cost

You pay for your customers. That's it.

You pay per customer, per facility — every module, every integration, every regulatory feature, every upgrade included. Cloud infrastructure is passed through at cost and bespoke professional services are scoped separately; everything else is included.

In your per-customer price

All included
  • Core banking ledger
  • Payments & transfers
  • KYC & identity
  • AML monitoring
  • Credit decisioning
  • Risk & analytics
  • Customer app
  • Back-office console
  • APIs & integrations
  • Regulatory compliance
  • Platform upgrades

Disclosed separately

  • Infrastructure usage

    Cloud and processing costs are passed through at cost. No markup.

  • Professional services

    Bespoke migrations and non-standard integrations are scoped separately when you need them.

Per customer, per facility

One transparent price that scales with your business.

Full platform included

Every module, every integration, every regulatory feature, every upgrade.

Pass-throughs disclosed

Infrastructure at cost. Bespoke services scoped separately. Nothing buried.

06 — Lower Operating Cost

Stop spending half your budget keeping the platform alive.

The hidden cost of a legacy banking stack isn't the licence — it's the people reconciling reports, chasing exceptions, and patching integrations by hand. Totara automates the work that doesn't need a human and surfaces the work that does, freeing your team to focus on customers, not the platform.

Traditional stack

Manual · siloed

  • Reconciliation
  • Regulatory reporting
  • Compliance monitoring
  • Exception management
  • Systems & integrations

Totara platform

Automated · integrated

  • Reconciliation
  • Regulatory reporting
  • Compliance monitoring
  • Exception management
  • Systems & integrations

Illustrative. People-density per function on a traditional banking stack vs Totara — your numbers will vary.

Continuous reconciliation

Regulatory reporting and compliance monitoring run automatically.

Exception-based operations

People work on what matters, not on what should already be done.

Lower back-office headcount

Reduced load in compliance and operations functions.

Operating cost over time

Illustrative. The shape of each line is the point.

Traditional stack Totara platform
$ 0 Time / scale →

Totara costs less than a traditional stack from day one — and stays on a linear curve as you scale. Traditional stacks compound cost: more customers means more people, more reconciliation, more integration work.

07 — Built for Smaller Financial Services Companies

World-class banking technology, built for institutions your size.

Credit unions, mutuals, building societies and smaller banks compete against institutions many times their size, on a fraction of the technology budget. Totara gives them the same platform capability a tier-one bank runs, at a price built for their scale — no growing into the technology, no re-platforming later.

A small community-bank branch alongside a modern banking dashboard

Built for mutuals and smaller banks

Designed specifically for building societies, credit unions, mutuals.

Big-bank capability

The technology the tier-one banks have, at a price you can sustain.

Scales both ways

Fits your size today, grows without re-platforming.

08 — Migration

The hard part of replatforming, made tractable.

Replatforming is the single biggest reason institutions don't move — messy data, undocumented rules, and an existential risk of getting it wrong. Totara treats migration as our problem: data tooling and AI-accelerated mapping do the heavy lifting, the new platform runs in parallel until the numbers reconcile, and you cut over only when you're ready.

Side-by-side comparison of legacy and Totara systems with reconciled balances

Designed in, not bolted on

Migration is part of the platform, not an afterthought.

Parallel running

See the new platform working before you commit to it.

Cut over on your schedule

You go live when the numbers match and your team is ready.

A proven migration journey

  1. 1

    Discover & assess

    Understand the existing data, rules, and current operating state.

    We start with listening.

  2. 2

    Analyse & map

    AI agents and specialists map data, rules and processes side by side.

    Clarity over complexity.

  3. 3

    Migrate & validate

    Data is moved, cleansed and validated with automated checks.

    Trusted, reconciled, ready.

  4. 4

    Parallel run

    New platform runs alongside the old. You watch the numbers match, every day.

    See it work before you switch.

  5. 5

    Cut over

    When the numbers match and your team is ready, you go live.

    On your terms.

  6. 6

    Stabilise & optimise

    We stay with you post go-live to ensure a smooth landing.

    Settle in, then soar.

Founders' group photo placeholder

09 — Our Story

Started by financial services professionals who had seen the problem from the inside.

Started by financial services professionals, we came together — six of us initially. We decided there had to be a better way. For years we had worked inside big banks and finance companies, desperately trying to make a difference but confounded by inefficiencies, blockers, and poor leadership.

All of us had spent our careers trying to make an impact — to help the customers, to help our co-workers, to provide strategy and direction from our experience. Despite the inertia of big banks to improve, to change, to genuinely lift their customers' experience, we did independently make gains. We did make things better. But there had to be a better way. How could we really make a difference?

Independently we made gains, but what could we achieve outside the constraints of the banking monoliths? We realised that across the six of us we had over 200 years of financial experience, and had worked in more than 20 countries. And that was just the immediate founders, not even including the people and contacts that we would inevitably bring in. This was a formidable team.

And what about the customer? Internationally, customers are dissatisfied with their big banks. Polls consistently show they would like to change, but unless they're remortgaging, they don't. Why not? Because what's the point — the public perceives all the big banks as being the same.

And what about the smaller banks, the credit unions, the mutuals, the building societies? Their customers really like them. Customer service matters to these organisations, and customer loyalty is the result. But bit by bit, they're disappearing. It's very hard to compete with banks with huge technology budgets. Governance and regulatory requirements put a huge burden on smaller institutions. One by one they've been merging to survive, or having to close. These are companies with histories that go back hundreds of years, and to see that history and legacy vanish is a horrible result. Certainly not good for the end consumer.

Hence Totara came to be. A modern banking platform with full capability. A modern banking app with a great customer experience. Governance and regulation built in. Simple, scalable pricing. A migration solution built in. The sum of these gives a smaller financial services company another option — other than merging, folding, or a slow attrition of customers.

Customers deserve better than they've been getting from the big banks. Why not give the smaller financial services companies better tools and systems than the big banks have themselves?