MLR 2017 · FCA · HMRC · NCA

    UK AML compliance software for MLR and FCA expectations.

    UK firms answer to the Money Laundering Regulations, the FCA's financial crime guide, HMRC supervision for some sectors and the NCA for reporting. ComplianceSuite runs the whole programme — business-wide risk assessment through to SAR submission — with the evidence a skilled-person review would ask for.

    • Business-wide and customer risk assessments
    • OFSI sanctions and PEP screening
    • REP-CRIM data captured as you operate
    • SAR and DAML submission to the NCA

    Risk assessment that stays current

    The business-wide risk assessment is a living model linked to live customer, product, geography and channel data, so inherent and residual risk update as the book changes rather than once a year in a document.

    • Customer risk scoring with documented factors
    • Product, channel and geography risk registers
    • Control effectiveness ratings and residual risk
    • Version history for every assessment

    Onboarding and ongoing monitoring

    Identification, verification, PEP and sanctions screening, source of funds and enhanced diligence run as one workflow, with trigger-based reviews replacing calendar-only refresh cycles.

    Reporting to the NCA and the FCA

    SARs and DAML requests are built from case evidence in the NCA's structure with acknowledgement tracking, while REP-CRIM figures are accumulated from operational data rather than reconstructed at year end.

    • SAR and DAML preparation and tracking
    • REP-CRIM data aggregation
    • Regulatory correspondence register
    • MLRO annual report inputs

    Built for cross-border UK and EU groups

    UK entities can run OFSI screening and NCA reporting while EU entities run the EU Consolidated List and national FIU formats, each with its own policies and data boundary, under one group-level risk view.

    FAQ

    Regulator questions, answered.

    Which UK regulators and authorities are supported?

    The FCA for supervised financial services firms, HMRC for sectors it supervises such as money service businesses and estate agents, the NCA for suspicious activity reporting and DAML requests, and OFSI for financial sanctions.

    Does the platform help with REP-CRIM?

    Yes. The data points the FCA's annual financial crime report requires — customer counts by risk rating and jurisdiction, SAR volumes, high-risk relationships and staff numbers in compliance roles — are captured as part of normal operations and reported on demand.

    How are UK PEPs treated differently?

    UK guidance expects domestic PEPs to be treated as lower risk than foreign PEPs unless other risk factors apply. Screening and scoring reflect that distinction, and the rationale for each PEP classification and approval is recorded.

    Is UK data residency available?

    Yes. Tenants can be hosted in the UK with encryption at rest and in transit, role-based access and an immutable audit log, supported by a UK GDPR-aligned data processing agreement.

    Bring your last FCA or HMRC findings.

    We will map each finding to the control, workflow and evidence that closes it.