Locate the Legal Entity Name
Before anything else, find the legal entity that operates the platform. It appears in the terms of service, usually within the first two paragraphs. Write it down exactly, including any corporate suffix. This name is what you will search in the CSA register and in provincial court records. If the terms do not name a legal entity, or if they name an entity in a jurisdiction with no reciprocal regulatory relationship with Canada, treat that as a gap requiring explanation.
Read the Withdrawal Terms Before the Deposit Terms
Most traders read deposit instructions carefully and skim the withdrawal section. Invert that habit. The withdrawal terms tell you how long your money is inaccessible, what documentation the platform requires to process a withdrawal, and whether any fees apply specifically at withdrawal. A platform that processes deposits in minutes but requires 'up to 30 business days' for withdrawals creates an asymmetry worth understanding before you commit. Look for that asymmetry in the document, not in the marketing copy.
Test Customer Support Before You Need It
Send an email or use the live chat before you register with a specific, answerable question — something like 'Where is the company registered?' or 'What document do I need to submit to verify my identity?' Record the response time, the specificity of the answer, and whether the answer matches what the public terms say. A support team that responds promptly with accurate, documented answers is a meaningful positive signal. A team that responds with vague platitudes, redirects, or silence is telling you something equally meaningful.
Check the Privacy Policy for Data Sharing
Under Canada's PIPEDA, you have the right to know what personal data a platform collects and with whom it is shared. A complete privacy policy names the categories of third parties that may receive your data — payment processors, CRM systems, marketing partners — rather than using a catch-all phrase like 'trusted third parties.' If the privacy policy does not specify categories of recipients, you are operating without full information. That may be acceptable to you, but it should be a conscious choice rather than an oversight.