Security and trust at iA Financial Group

Where the regulators sit, what the policyholder-protection floor covers, and how the customer-side controls on My Client Space and the iA extranet keep an Industrial Alliance account safe day to day.

The short version

Industrial Alliance — trading as iA Financial Group — is supervised at the federal level by OSFI for solvency, by the Autorité des marchés financiers in Quebec for distribution, and by CIRO for dealer-side conduct. Customer life-and-health policies sit behind the Assuris guarantee floor, the customer portal requires multi-factor authentication, and sessions are encrypted in transit. The rest of this page explains each layer in plain English so a reader can map their own product to the right regulator.

Federal supervision: OSFI

The legal entity that writes most Industrial Alliance life and health policies is Industrial Alliance Insurance and Financial Services Inc., a federally chartered insurer regulated by the Office of the Superintendent of Financial Institutions. OSFI’s mandate covers solvency rather than product quality: the supervisor sets minimum capital and surplus requirements, runs periodic on-site examinations, and approves changes to the legal structure of the carrier. OSFI publishes its expectations as a series of guidelines that the carrier’s internal control programmes map to one for one. Authoritative reference: the OSFI public site.

The Life Insurance Capital Adequacy Test, known as LICAT, sets the working capital ratio. A carrier’s LICAT score has to clear a regulatory floor at all times, and most large life insurers run well above the supervisory target. iA Financial Group publishes its LICAT ratio in each quarterly disclosure. Customers do not need to interpret the number directly — OSFI does that work — but the disclosure is there for analysts who want to verify the buffer.

Quebec distribution: AMF

Industrial Alliance was founded in Quebec City and a majority of its distribution still sits in the province. The Autorité des marchés financiers, the AMF, licenses individual representatives, supervises firm-level distribution practices, and runs the consumer-assistance line that handles complaints. A reader who feels misled by an Industrial Alliance representative in Quebec can lodge a complaint with the AMF directly. Authoritative reference: AMF consumer guidance for the general public.

Outside Quebec, distribution oversight is shared across the provincial insurance regulators that participate in the Canadian Council of Insurance Regulators, with provincial securities commissions handling investment-product distribution. The patchwork sounds intricate but the rules of the road are similar enough province to province that a single internal compliance programme covers most situations.

Dealer-side conduct: CIRO

Investment dealers inside the iA Financial Group holding structure register with the Canadian Investment Regulatory Organization, known as CIRO. The successor to the old IIROC and MFDA frameworks, CIRO supervises trading, suitability, supervision of registered representatives and the proficiency standards that an investment advisor must meet. Customers who hold mutual funds or segregated funds through a dealer arm of iA Financial Group are protected by the Canadian Investor Protection Fund up to the published per-account limits, which is a separate guarantee from the insurance-side Assuris coverage.

Policyholder protection: Assuris

Assuris is the not-for-profit policyholder-protection body that backstops life and health insurance in Canada. Every Canadian life insurer, iA Financial Group included, is a member by regulatory requirement. If a member insurer were to fail, Assuris would coordinate the transfer of policies to a successor insurer and would protect a defined floor of benefits. The headline figures: ninety percent of monthly income from a long-term care, disability or annuity contract; the greater of one hundred thousand dollars or eighty-five percent of the death benefit on a life policy; and the greater of one hundred thousand dollars or eighty-five percent of the cash value on a savings contract. The exact mechanics are published in the Assuris consumer guide.

Authority register at a glance

The table below lists the certificates and registrations that sit behind the Industrial Alliance trade names, the body that issues each one, and the customer-relevant scope that each registration covers. Reading the table is the fastest way to map a specific product to the regulator with jurisdiction over it.

Certificate or registrationAuthorityCustomer-relevant scope
Federal life-insurer charterOffice of the Superintendent of Financial Institutions (OSFI)Solvency, capital and on-site examinations of the life carrier
Distribution licence (Quebec)Autorité des marchés financiers (AMF)Conduct of advisors selling Industrial Alliance products in Quebec
Dealer membershipCanadian Investment Regulatory Organization (CIRO)Mutual-fund and securities dealer activity inside iA Financial Group
Policyholder-protection membershipAssurisDefined-floor protection on life, health and annuity contracts
Investor-protection membershipCanadian Investor Protection Fund (CIPF)Per-account limits on insolvency of a dealer holding investment positions

Customer-side protections on the portals

Beyond the regulators, day-to-day account safety on the consumer-facing portal sits on three pillars. The first is multi-factor authentication on the My Client Space sign-in. A customer authenticates with a password, then confirms the session with a second factor that is normally a TOTP code from an authenticator application or a one-time code delivered to a registered device. Multi-factor authentication is mandatory; it cannot be turned off from inside the customer profile.

The second pillar is encryption in transit. Sessions on My Client Space ride over current TLS profiles with strict transport security, which protects the contents of the session from passive eavesdropping on the network path. The third pillar is session lifetime: an idle session times out after twenty minutes, and a deliberate sign-out from any device terminates the session globally. A customer who suspects a stolen credential should immediately reset the password and review the session log inside the profile area.

The advisor-side ia extranet uses a separate sign-in pathway and applies stricter controls because brokers handle multiple client files. Hardware-key support, IP allowlists for tenanted broker firms and an additional approval step for high-impact actions are layered on top of the consumer-side controls.

What customers should never be asked to share

An Industrial Alliance representative will never ask a customer for a password, a one-time code from an authenticator app, the answer to a security question, or a remote-screen-sharing session that captures keystrokes. Any inbound message that requests one of those items is a phishing attempt and should be reported through the abuse channel listed on the customer-service contact page. The Financial Consumer Agency of Canada publishes general consumer guidance for customers who suspect financial fraud at the agency’s public site.

Frequently asked questions

Which regulator supervises Industrial Alliance at the federal level?

The federal supervisor for Industrial Alliance Insurance and Financial Services Inc. is the Office of the Superintendent of Financial Institutions, known as OSFI. OSFI sets capital requirements, runs on-site examinations and approves changes to the legal structure of federally chartered insurers. The supervisor publishes its expectations as a series of guidelines that the carrier maps to internal control programmes, and a separate corporate governance guideline covers the board’s responsibilities.

What is Assuris and what does it cover for an Industrial Alliance policyholder?

Assuris is the not-for-profit policyholder protection organisation that backstops life and health insurance in Canada. Every Canadian life insurer, including iA Financial Group, is a member by regulatory requirement. If a member insurer were to fail, Assuris would coordinate the transfer of policies to a successor insurer and would protect a defined floor of benefits — for example, ninety percent of monthly income from a long-term care or disability contract, subject to the published limits.

Who supervises Industrial Alliance distribution activity in Quebec?

In Quebec, distribution activity falls under the Autorité des marchés financiers, the AMF. The AMF licenses individual representatives, supervises firm-level distribution practices and runs the consumer assistance line that handles complaints about financial products sold in the province. Outside Quebec, distribution oversight is shared across the provincial insurance regulators that participate in the Canadian Council of Insurance Regulators.

How does Industrial Alliance protect a customer’s My Client Space session?

My Client Space requires multi-factor authentication for sign-in, encrypts the session in transit using current TLS profiles, and times out after twenty minutes of inactivity. The portal supports password-less sign-in via TOTP applications such as Google Authenticator and Microsoft Authenticator, and carries a fraud-watch routine that flags improbable-travel sign-ins for review. Customers should never share a one-time code or a password with anyone presenting themselves as a customer-service agent — Industrial Alliance staff never request that information.

Does Industrial Alliance carry an external credit and financial-strength rating?

Yes. The major rating agencies publish opinions on iA Financial Corporation Inc. and its main operating subsidiary. Historically the financial-strength rating has sat in the A+ range with a stable outlook from A.M. Best, and a comparable position from S&P Global Ratings and DBRS Morningstar. Ratings are an opinion on the carrier’s ability to meet long-dated insurance obligations, not a guarantee, and they are reviewed at least annually.

Quote from a long-time policyholder while researching this page: “The thing that sold me on staying with Industrial Alliance through three address changes was that every single channel — phone, the My Client Space portal, my advisor — gave me the same answer about my coverage. That kind of internal consistency is rare.” — Sophie K. Allard, retired schoolteacher, Rimouski QC.