IIROC is now part of CIRO, so IIROC outsourcing should be understood through the current CIRO framework. The value of the page is to help readers understand the legacy label and then point them to current CIRO rules and notices for outsourcing and service arrangements.
Official sources
CIRO's outsourcing-arrangements publication discusses common outsourcing arrangements under the IIROC Rules and related regulatory principles.
What teams need to understand
The core principle is accountability. Dealer members may use third parties for certain functions, but regulatory responsibilities, supervision, records, client protection, confidentiality, and access cannot disappear because work is outsourced.
What teams need to do
- Identify legacy IIROC references and map them to current CIRO rules.
- Inventory outsourced functions and service arrangements.
- Document supervision, contracts, record access, confidentiality, and regulatory access.
- Monitor provider performance, issues, and changes.
- Keep transition notes where rule terminology has changed.
Evidence to maintain
- Outsourcing inventory and current-rule mapping.
- Contracts and supervision records.
- Provider assessments and approvals.
- Monitoring, issue, and remediation evidence.
- Records showing regulatory access and client protection controls.
Common gaps
- Legacy IIROC wording remains on internal pages without current CIRO confirmation.
- Outsourcing records do not identify the applicable rule source.
- Supervision evidence is stored outside provider records.
How Halbarad helps
Halbarad helps teams maintain provider records, rule mappings, contracts, supervision evidence, monitoring, and issue remediation while transitioning from legacy labels to current CIRO sources.
Disclaimer
This guide is for general information only and is not legal advice. Review the official regulation, guidance, and supervisory materials, and consult qualified counsel or compliance advisors for your organization's specific obligations.