AMLA compliance software for directly supervised EU groups.
AMLA supervises selected obliged entities directly and sets the standards national supervisors apply to everyone else. ComplianceSuite turns your controls into structured, queryable evidence so data requests, joint supervisory team reviews and breach assessments do not become fire drills.
- Structured evidence for data requests
- RTS-aligned breach gravity assessment
- Group-wide risk aggregation
- Immutable decision and override logs
Answer supervisory data requests in days, not months
Customer risk, screening outcomes, alerts, cases, filings and policy versions are all queryable from one model, so a request for a population of files or a control's operating history is an export rather than a project.
- Point-in-time reconstruction of any customer file
- Population-level extracts with filters and audit stamps
- Policy and rule version history with effective dates
- Complete alert-to-outcome lineage
Breach gravity and periodic penalty exposure
Controls are tagged to the obligations AMLA assesses, with severity, duration, recurrence and remediation status recorded so a self-assessment of gravity is defensible against the regulatory technical standards.
Group-wide risk in one view
Each entity keeps its own risk model, screening lists and local filings, while the group compliance function sees aggregated customer, geography, product and channel risk with drill-down to source records.
Governance evidence supervisors ask for
Maker-checker approvals, MLRO sign-offs, training completion, model tuning rationale and remediation plans are all captured in-platform and time-stamped, with role-based access and no silent edits.
- Four-eyes approvals on risk overrides
- Tuning and threshold-change rationale
- Remediation plans with owners and due dates
- Board and committee reporting packs
FAQ
Regulator questions, answered.
Which entities does AMLA supervise directly?
AMLA directly supervises a limited group of selected obliged entities operating across multiple member states with a high residual risk profile, assessed against harmonised criteria. All other obliged entities remain under national supervision, but national supervisors apply AMLA's standards and guidelines.
What should a firm prepare before an AMLA review?
A complete, queryable record of customer risk assessments, screening and monitoring outcomes, case decisions with rationale, filings and acknowledgements, and versioned policies and rules with effective dates — plus evidence that governance controls such as maker-checker and MLRO sign-off actually operated.
How does ComplianceSuite support gravity-of-breach assessment?
Controls are mapped to the underlying obligations, and any failure is recorded with severity, duration, whether it recurred, the population affected and the remediation taken. That gives a structured basis for assessing gravity in line with the applicable regulatory technical standards.
Does this replace our national supervisor's requirements?
No. National requirements continue to apply, and the platform runs local rule sets and FIU reporting formats alongside AMLA-aligned evidence, so one programme satisfies both layers of supervision.
Get AMLA-ready before the request arrives.
Bring your last supervisory review and we will show which evidence would already be one export away.