Risk Is a Movie, Not a Photo

What we talked about.

Joanna, co-founder and Chief Strategy Officer of Amlock, joins Sunny Ray to explain why lenders still underwrite businesses from a single snapshot when businesses themselves are constantly changing. Amlock, a Toronto-built risk intelligence layer for financial institutions, turns fragmented financial data into continuously updated risk profiles that follow a business before, during and after capital is deployed. Joanna traces her path from studying management engineering at Waterloo through Cardano governance and DAO capital allocation, explaining how watching decentralized communities decide who gets funded taught her that money is fundamentally about trust, reputation and shared values rather than single metrics. The conversation covers Canada's 2024 open banking law, rising synthetic fraud driven by generative AI, and new explainability requirements from regulators, all of which shape how Amlock verifies data and augments rather than replaces existing lending workflows. Joanna also describes Amlock's four pillars, visibility, veracity, velocity and vigilance, and how continuous monitoring helps credit unions and lenders catch payment drift and stacking before a missed payment. It is a grounded look at how risk should be tracked like a movie, not judged from a single photo.

Amlock co-founder Joanna explains why lenders should track business risk continuously, like a movie, instead of judging it from a single snapshot.

The questions, and the answers.

What are you building at Amlock, and why should people care?

Amlock is risk intelligence infrastructure for financial institutions. Lenders currently make capital decisions based on fragmented snapshots of a business, but businesses are dynamic and constantly changing. We turn fragmented financial data into clear, continuously updated views of a business and its risk, embedding into the lender's entire lifecycle. I want listeners to see how fast technology is moving and how we can bring that back to the institutions that shape economies and support businesses.

You trained as a management engineer at Waterloo and then went into Cardano governance and DAO capital allocation. What pulled you in that direction?

My program at Waterloo was progressive and let me work across many industries, studying optimization, simulations and technology. When I got introduced to blockchain and decentralized governance, I was fascinated because there is no more complicated endeavor than getting humans to self-organize. DAOs build mechanisms for people to self-organize and for communities to thrive in a decentralized manner, and that is what pulled me in.

What did years of watching a DAO decide who gets funded teach you about capital and trust that a bank never would?

The biggest lesson is that money is mostly about trust. In a decentralized environment, many factors shape who gets funded, and having a lot of information does not mean you have a lot of meaning from it. Reputation, contribution history and shared values all build trust in an ecosystem. It is never just about getting money and paying it back, there is much more behind those decisions.

You say risk is a movie, but financial institutions are underwriting from a photo. Can you walk me through that line?

Right now lenders base risk on a snapshot, like a bank statement or credit report, while a lot of information stays hidden, like revenue concentration or a changing risk profile. We give lenders a continuously updated risk profile so they can see how a business evolves before, during and after capital is allocated, instead of judging it off one static photo in time.

About 52 percent of microbusinesses had to sign a personal guarantee to get approved. What does that number tell you about underwriting?

It really points to a visibility problem. At Amlock we talk about solving four V's, visibility, veracity, velocity and vigilance. That statistic shows how much hidden information is not captured when a business applies for a loan, which pushes lenders to demand personal guarantees instead of truly understanding the business behind the application.

Open banking became law in Canada in 2024. What did that actually unlock that was impossible the year before?

Open banking creates access to a lot more financial data, which is beneficial, but access to more data does not automatically create better decisions or meaning behind it. If there is already information asymmetry with the data we have now, that only grows once more data becomes accessible. We try to act as the layer that deciphers this fragmented data for the right partners.

Synthetic fraud is now roughly a quarter of all fraud losses and generative AI made creating a fake business almost free. How does that change what you have to detect?

This is our veracity pillar, whether you can trust the information in front of you. AI has helped us a lot, but it has also made fraud and synthetic data easier to create. We do not rely on one source of truth. By plugging into many different data sources and using advanced algorithms, we can verify whether data has been changed and help lenders detect it.

Where do people learn more about Amlock and about you?

We are mostly active on LinkedIn, our company page is Amlock Tech, and you can find me there under my own name as well. We are grateful to have been accepted as an approved vendor with the Canadian Lenders Association, and I would love to do more podcasting like this if people find this space interesting.