Totara

Regulatory, financial-crime & prudential automation

Compliance, computed — not attested.

Totara maps every regulation a bank faces to a control — and runs most of them automatically, from your live data — leaving only the exceptions for a human. Regulation, financial crime and the prudential numbers, handled as one layer. Architected to run over the core you already have, or on ours.

Totara — the compliance layer for banks, on your live data

01 — Regulation & Governance

Every regulation, mapped to a control.

Most platforms treat regulation as something you layer on top — separate teams, separate tools, manual reporting, constant catch-up every time the rules change. Totara is built the other way round. Every regulatory obligation is mapped to a policy, every policy to a control, and every control to the part of the platform that runs it — automatically, wherever the rule allows.

Because governance is a layer, not a rebuild, it's architected to run over the core you already have — automating your obligations without replacing your platform — or as part of the complete Totara stack. Either way, the obligations, the controls and the evidence are identical.

That means Basel III and the FATF AML standards are already in the platform. So are the UK PRA Rulebook and FCA conduct framework, the EU's CRR / CRD prudential framework, the US Federal Reserve, OCC and FinCEN regimes, Canada's OSFI, and Ireland's Central Bank framework — alongside the New Zealand Deposit Takers Act (2023), APRA's CPS 230, and the local rules that apply in every market you operate in. As the rules change, the platform changes — once, centrally, for every institution.

A live governance dashboard shows compliance against the regulation that applies to you, in the jurisdiction you operate in. What the platform assures, it assures; what still needs a person, it surfaces as a worklist — never a binder of attestations reconstructed after the fact.

Regulation & compliance

Built in. Across every market your members bank.

499

regulations

4,155

obligations mapped

139

regulators

2,844

automated controls

17 markets + global standards

NZ New Zealand 84 regulations
AU Australia 74 regulations
EU European Union 69 regulations
UK United Kingdom 64 regulations
US United States 69 regulations
CA Canada 58 regulations
IE Ireland 24 regulations
PAC Pacific · 10 markets 20 regulations
Global standards Basel · FATF · ISO · NIST · PCI

Per-market breakdown

NZ New Zealand RBNZ · FMA · MBIE · DIA · IRD
Regulations 84
Obligations 994
Automated controls
63%
AU Australia APRA · ASIC · AUSTRAC · ATO · OAIC
Regulations 74
Obligations 944
Automated controls
60%
EU European Union EBA · ECB-SSM · EC
Regulations 69
Obligations 322
Automated controls
76%
UK United Kingdom PRA · FCA · ICO · HMRC
Regulations 64
Obligations 294
Automated controls
66%
US United States Fed · OCC · FDIC · FinCEN · CFPB
Regulations 69
Obligations 287
Automated controls
81%
IE Ireland Central Bank of Ireland · DPC · Revenue
Regulations 24
Obligations 250
Automated controls
72%
CA Canada OSFI · FINTRAC · FCAC · CRA
Regulations 58
Obligations 230
Automated controls
72%
PAC Pacific · 10 markets RBF · CBS · NRBT · RBV · BPNG + APG
Regulations 20
Obligations 363
Automated controls
93%
Global standards — 37 regulations from the global standard-setters (Basel III / BCBS 239, FATF, ISO 27001, NIST) underpin every market above. A further 471 obligations apply across both New Zealand and Australia (trans-Tasman).

Every obligation, mapped

Obligation → policy → control, with an automated control wherever the rule allows.

Architected to run over your core, or ours

Run the governance and compliance layer over the core you already have — without replacing it — or take the complete Totara platform.

Live governance dashboard

Real-time assurance against the rules that apply to you, not retrospective reports.

Honest by design

What's assured is assured; what's yours is a visible worklist, not a hidden gap.

Regulatory change as a platform update

Once, centrally, for every institution. Not a bank-side project.

Global coverage, local rules

Basel III · FATF · UK PRA/FCA · EU CRR/CRD · US Fed/OCC/FinCEN · OSFI · CBI · NZ DTA · APRA CPS 230.

02 — Financial Crime

Every transaction watched. Every party screened.

Financial crime is usually someone else’s box — a separate vendor, a separate data feed, a separate team reconciling alerts by hand. Totara builds it into the same platform that holds the ledger and the obligations, so every transaction and every party is assessed against the same data.

Transactions are monitored by rule-based typologies and behavioural models; parties are screened against sanctions and PEP lists at onboarding and as they transact; and every alert flows through one case-management workflow — triage, investigation, disposition — with an immutable, content-hashed evidence trail behind each decision.

Identity and due diligence sit in the same place: tiered customer due diligence, periodic review scheduled automatically, and enhanced diligence triggered by the risk a customer actually presents — not a one-size-fits-all form.

Financial crime · built in

Only deal with the real exceptions.

Transaction monitoring

FATF typologies plus behavioural scoring — tuned and back-tested to cut false positives.

Sanctions & PEP screening

Parties screened at onboarding and as they transact, with adjudication built in.

KYC & CDD

Risk-tiered due diligence, with periodic review scheduled automatically.

Case management

One queue — triage, investigate, dispose — with evidence attached to every decision.

Monitor Detect Investigate Dispose immutable, content-hashed evidence behind every decision

Cleared automatically. The platform assesses every transaction and party against the same live data — and surfaces only the exceptions that need a human.

Transaction monitoring

FATF typologies plus behavioural scoring, with false-positive tuning and back-testing.

Sanctions & PEP screening

Parties screened at onboarding and in-flight, with adjudication built in.

KYC / CDD, risk-tiered

Deterministic tier assignment, automatic periodic review, EDD where the risk warrants it.

Alert → case → disposition

One workflow, one audit trail, evidence attached to every decision.

Audit-ready by construction

Immutable, content-hashed records a regulator can query.

One data model

Financial crime assessed against the same live ledger and party data as everything else.

03 — Prudential & Analytics

The numbers your regulator asks for — already run.

The prudential calculations that cost a smaller institution a whole department — liquidity (LCR/NSFR), capital and risk-weighted assets, expected credit loss, interest-rate risk in the banking book — Totara computes them, nightly, from your live positions. Not attested after the fact from a spreadsheet: computed from the ledger.

The regulatory returns build themselves from the same numbers — RBNZ BS-series, APRA ARS and the local equivalents — with cell-level lineage back to the underlying data. A Finance or Compliance officer reviews and signs off before anything is filed: the platform does the assembly, the human keeps the authority.

It all runs on a Snowflake-native analytics core, so the same governed data drives your dashboards, your risk views and your board reporting — one set of numbers, not four.

Prudential & analytics · computed nightly

A department's worth of calculation, run every night.

Liquidity

LCR · NSFR

APS 210 · BS13

Capital & RWA

CET1 · Tier 1 · Total

Basel III · APS 110/112/113

Credit loss

ECL · staging

IFRS 9

Interest-rate risk

EVE · NII

IRRBB

Stress testing

scenario · reverse-stress

ICAAP · APS 220

Prudential returns

built from live data

RBNZ BS · APRA ARS

Computed from your live positions on a Snowflake-native analytics core — one governed set of numbers behind every dashboard and board pack. Returns are assembled automatically, with cell-level lineage and sign-off before filing.

The prudential set, computed

LCR/NSFR, capital/RWA, ECL (IFRS 9), IRRBB (EVE/NII), stress and reverse-stress.

Returns that build themselves

RBNZ BS / APRA ARS and local equivalents, cell-level lineage, sign-off before filing.

Live, not retrospective

Computed from the ledger nightly, not assembled by hand each quarter.

Snowflake-native analytics

One governed set of numbers behind every dashboard and board pack.

A department, run as a calculation

The work that used to need a team of analysts, spreadsheets and consultants.

Model risk, tracked

Model register, drift monitoring and change control alongside the calculations.

04 — The Full Platform

Take a layer. Or take the whole bank.

Everything Totara does is built as one system — core ledger, payments, KYC and AML, credit, analytics, and a best-in-class customer app, sharing a single data model and one governance layer. So you can start with the governance and compliance layer over the core you already run, and add the rest on your own timeline.

When you want the whole platform, the customer-facing app — modern, mobile-first, and genuinely loved — is included, not a separate purchase. One vendor, one contract, one upgrade cycle, no integration projects.

Totara customer app alongside the platform's modular building blocks

Modular by design

Take just the governance layer, or the complete platform — your call, your timeline.

One integrated system

Core, payments, KYC/AML, credit, analytics and app, designed and built together.

Customer app included

Best-in-class mobile banking as standard, not a separate purchase.

One contract, one upgrade

One vendor, one team, one upgrade cycle. No multi-vendor glue.

The whole bank. One platform.

Core, payments, KYC/AML, credit, risk & analytics, the customer app and back office — designed as one system, not assembled from vendors.

Core ledger Payments KYC & AML Credit Risk & analytics Customer app Back office APIs

Shared data model · Event bus · Governance layer · One contract · One upgrade

or take the parts you need

Governance & Analytics

The compliance and insight layer — runs on any core, yours or ours.

  • Live governance dashboard
  • Regulatory reporting
  • Risk monitoring & controls

Available standalone

Add to the package

Core Banking

The engine — ledger, money movement, onboarding, lending.

  • Core ledger & accounts
  • Payments processing
  • KYC/AML · credit decisioning

Available standalone

Add to the package

Customer App

Best-in-class mobile banking — ship it on its own.

  • Modern mobile app
  • Digital onboarding
  • Notifications & servicing

Available standalone

Add to the package

Common ways to start

Governance & Analytics Governance + Core The App All three — the complete platform

One data model and event bus underneath every module — so start with one, add the rest later with no re-integration project.

05 — Transparent Cost

You pay for your customers. That's it.

Banking platform pricing is usually opaque on purpose — base licence, module licences, transaction fees, integration fees, change requests, and a list of 'additional capabilities' priced separately. Six months in you've spent twice what you budgeted, and the cost only goes one way.

Totara pricing is simple. You pay per customer, per facility. The full platform is included — every module, every integration, every regulatory feature, every upgrade. There are no separate fees for the customer app, the AML engine, the credit decisioning platform, or the analytics layer.

Two things sit outside that per-customer price, and we disclose them up front: cloud infrastructure usage is passed through at cost, and bespoke professional services (custom migrations, integrations with non-standard external systems) are scoped separately when you need them. Everything else is included.

The number scales cleanly with your business. When you have more customers, you pay more. When you don't, you don't.

In your per-customer price

All included
  • Core banking ledger
  • Payments & transfers
  • KYC & identity
  • AML monitoring
  • Credit decisioning
  • Risk & analytics
  • Customer app
  • Back-office console
  • APIs & integrations
  • Regulatory compliance
  • Platform upgrades

Disclosed separately

  • Infrastructure usage

    Cloud and processing costs are passed through at cost. No markup.

  • Professional services

    Bespoke migrations and non-standard integrations are scoped separately when you need them.

Per customer, per facility

One transparent price that scales with your business.

Full platform included

Every module, every integration, every regulatory feature, every upgrade.

Pass-throughs disclosed

Infrastructure at cost. Bespoke services scoped separately. Nothing buried.

Predictable economics

The number scales cleanly. More customers, more value.

One price, published

Clear pricing, clearly stated. Not a negotiation.

06 — Lower Operating Cost

Stop spending half your budget keeping the platform alive.

The hidden cost of a traditional banking stack isn't the licence fees. It's the people. Compliance teams reconciling reports by hand. Operations teams managing exceptions that should never have been exceptions. IT teams patching integrations between systems that were never designed to talk to each other. Risk teams pulling data from four sources to answer one question.

Totara automates the work that doesn't need a human and surfaces the work that does. Reconciliation is continuous. Regulatory reports build themselves. Compliance dashboards are live, not assembled. Exceptions route to the right person, with the context already attached. The platform takes care of itself.

That frees your team to do the work only your team can do — looking after your customers, growing your business, and shaping the products your members actually want.

Traditional stack

Manual · siloed

  • Reconciliation
  • Regulatory reporting
  • Compliance monitoring
  • Exception management
  • Systems & integrations

Totara platform

Automated · integrated

  • Reconciliation
  • Regulatory reporting
  • Compliance monitoring
  • Exception management
  • Systems & integrations

Illustrative. People-density per function on a traditional banking stack vs Totara — your numbers will vary.

Continuous reconciliation

Regulatory reporting and compliance monitoring run automatically.

Exception-based operations

People work on what matters, not on what should already be done.

Self-maintaining platform

Less time keeping the lights on, more time doing the work.

Lower back-office headcount

Reduced load in compliance and operations functions.

Team focus

Your people look after customers, not after the platform.

Operating cost over time

Illustrative. The shape of each line is the point.

Traditional stack Totara platform
$ 0 Time / scale →

Totara costs less than a traditional stack from day one — and stays on a linear curve as you scale. Traditional stacks compound cost: more customers means more people, more reconciliation, more integration work.

07 — Built for Smaller Financial Services Companies

World-class banking technology, built for institutions your size.

Building societies, credit unions, mutuals, and smaller banks are doing some of the most important work in financial services — serving members, supporting communities, lending to people the big banks won't. But they're competing against banks twenty or fifty times their size, on technology budgets a fraction of what those banks spend.

Totara exists because that gap shouldn't have to exist. The same platform capability that powers a global tier-one bank — modern customer app, automated compliance, real-time risk and reporting, full lending and deposit product set — is available to a mutual with a few hundred million dollars on the balance sheet, at a price that fits the business model.

You don't need to grow into the technology. The technology fits the scale you're at today, and grows with you.

A small community-bank branch alongside a modern banking dashboard

Built for mutuals and smaller banks

Designed specifically for building societies, credit unions, mutuals.

Big-bank capability

The technology the tier-one banks have, at a price you can sustain.

No compromise

Stay affordable without compromising customer experience or compliance.

Scales both ways

Fits your size today, grows without re-platforming.

Built by sector insiders

By people who understand mutuals and what they stand for.

08 — Migration

The hard part of replatforming, made tractable.

Moving off a legacy banking platform is the single biggest reason institutions don't move. The data is messy, the rules aren't documented, the staff have years of muscle memory, and the risk of getting it wrong is existential. Most platform vendors treat migration as the customer's problem.

Totara treats it as ours. We've built the platform around migration from the start — data tooling, AI-powered agents that accelerate the analysis and mapping work, and a deeply experienced migration team that lives and breathes data. Your data is moved across, validated, and reconciled. The new platform runs in parallel with the old one while you watch the numbers match. Your operations team learns the new system before anything switches over.

When you're ready — and only when you're ready — you cut over with confidence, because you've already seen it work.

Side-by-side comparison of legacy and Totara systems with reconciled balances

Designed in, not bolted on

Migration is part of the platform, not an afterthought.

AI-accelerated analysis

Agents speed up data analysis, mapping, and validation.

Experienced migration team

People who live and breathe banking data.

Parallel running

See the new platform working before you commit to it.

Cut over on your schedule

You go live when the numbers match and your team is ready.

A proven migration journey

  1. 1

    Discover & assess

    Understand the existing data, rules, and current operating state.

    We start with listening.

  2. 2

    Analyse & map

    AI agents and specialists map data, rules and processes side by side.

    Clarity over complexity.

  3. 3

    Migrate & validate

    Data is moved, cleansed and validated with automated checks.

    Trusted, reconciled, ready.

  4. 4

    Parallel run

    New platform runs alongside the old. You watch the numbers match, every day.

    See it work before you switch.

  5. 5

    Cut over

    When the numbers match and your team is ready, you go live.

    On your terms.

  6. 6

    Stabilise & optimise

    We stay with you post go-live to ensure a smooth landing.

    Settle in, then soar.

Founders' group photo placeholder

09 — Our Story

Started by financial services professionals who had seen the problem from the inside.

Started by financial services professionals, we came together — six of us initially. We decided there had to be a better way. For years we had worked inside big banks and finance companies, desperately trying to make a difference but confounded by inefficiencies, blockers, and poor leadership.

All of us had spent our careers trying to make an impact — to help the customers, to help our co-workers, to provide strategy and direction from our experience. Despite the inertia of big banks to improve, to change, to genuinely lift their customers' experience, we did independently make gains. We did make things better. But there had to be a better way. How could we really make a difference?

Independently we made gains, but what could we achieve outside the constraints of the banking monoliths? We realised that across the six of us we had over 200 years of financial experience, and had worked in more than 20 countries. And that was just the immediate founders, not even including the people and contacts that we would inevitably bring in. This was a formidable team.

And what about the customer? Internationally, customers are dissatisfied with their big banks. Polls consistently show they would like to change, but unless they're remortgaging, they don't. Why not? Because what's the point — the public perceives all the big banks as being the same.

And what about the smaller banks, the credit unions, the mutuals, the building societies? Their customers really like them. Customer service matters to these organisations, and customer loyalty is the result. But bit by bit, they're disappearing. It's very hard to compete with banks with huge technology budgets. Governance and regulatory requirements put a huge burden on smaller institutions. One by one they've been merging to survive, or having to close. These are companies with histories that go back hundreds of years, and to see that history and legacy vanish is a horrible result. Certainly not good for the end consumer.

Hence Totara came to be. A modern banking platform with full capability. A modern banking app with a great customer experience. Governance and regulation built in. Simple, scalable pricing. A migration solution built in. The sum of these gives a smaller financial services company another option — other than merging, folding, or a slow attrition of customers.

Customers deserve better than they've been getting from the big banks. Why not give the smaller financial services companies better tools and systems than the big banks have themselves?