Most professional services firms affected by AML/CTF Tranche 2 don't just have their own compliance to manage โ€” they have clients whose compliance they're now expected to advise on, assist with, or manage entirely. If you're in this position, you quickly discover that the available tools weren't built for you.

Every AML compliance platform on the market was built for a single entity managing its own obligations. None of them were designed for an accountant juggling KYC checks, risk assessments, and AML programs across 30 different client businesses.

This article walks through what managing AML compliance at scale actually looks like for professional services firms, what systems work, and how to build a practice that can deliver this as a service without it taking over your life.

Why managing AML for multiple clients is different

When you're managing AML compliance for clients โ€” not just your own firm โ€” the complexity multiplies in three ways:

  1. Volume: A firm with 30 clients needs 30 separate risk assessments, 30 KYC checks (at minimum), 30 AML programs, and 30 audit trails. That's 150+ compliance tasks just to start.
  2. Variation: Each client has different risk profiles, different business types, different beneficial ownership structures, and different needs. You can't use the same program template for a sole trader and a family trust with offshore beneficiaries.
  3. Ongoing monitoring: AUSTRAC doesn't just require a one-time check. Client risk profiles change. Documents expire. You need a system that alerts you when action is needed across all clients โ€” not just the ones you remember to check.

The real problem: Most existing AML software is a single-firm tool you'd need to log into 30 times. That's not a system โ€” it's 30 separate compliance problems with a different password each time.

The wrong way vs the right way

โŒ What doesn't scale

  • Spreadsheet tracking KYC status for 30 clients
  • Separate login per client on single-firm software
  • Generic AML program template for every client
  • Calendar reminders for document expiry dates
  • Emailing identity documents back and forth
  • Manual reporting to AUSTRAC per client

โœ“ What actually scales

  • Single dashboard showing all clients' compliance status
  • Automated alerts when documents expire or risk changes
  • Electronic KYC โ€” clients verify themselves digitally
  • Tailored AML programs generated per client risk profile
  • 7-year audit trail maintained automatically
  • Compliance billed as a monthly managed service

Building your AML compliance service offering

Step 1 โ€” Decide what you're offering

Most professional services firms offer one of three models for client AML compliance:

  1. Advisory only: You help clients understand their obligations and set up their own compliance. You don't manage it ongoing. Lower revenue, lower liability.
  2. Setup and handover: You set up the client's AML program and KYC system, then hand it to them to run. One-time fee per client.
  3. Managed compliance service: You manage all of it โ€” KYC checks, risk monitoring, program maintenance, AUSTRAC reporting โ€” on an ongoing basis. Monthly retainer per client. Highest revenue, most scalable once you have the right tool.

Step 2 โ€” Price it properly

AML compliance is a new, specialist service. Price it accordingly โ€” not as an add-on to existing work. Typical market rates in 2026 for managed AML compliance services:

Revenue potential for your practice

30Clients managed
$150Per client/month
$54kNew annual revenue

Step 3 โ€” Build your client onboarding workflow

Every client you take on for AML compliance needs to go through the same onboarding process. Document it as a workflow so staff can follow it consistently:

  1. Initial scope meeting โ€” confirm which designated services the client provides
  2. Risk assessment โ€” document client type, business activities, geographies, and risk factors
  3. KYC verification โ€” verify identity of all controllers, beneficial owners, and key individuals
  4. AML/CTF program โ€” generate and review with client; get sign-off
  5. Staff training โ€” confirm client has trained their staff (or offer training as a service)
  6. Ongoing monitoring setup โ€” agree on review frequency and alert thresholds

Step 4 โ€” Choose the right tool

The tool is what makes or breaks your ability to scale. Look specifically for:

Step 5 โ€” Maintain ongoing compliance efficiently

Ongoing compliance is where most accountants underestimate the workload. AUSTRAC requires:

With 30 clients, that's potentially 30 annual reviews, 30 re-verification cycles, and ongoing monitoring across all of them. Without the right system, this becomes unmanageable. With the right tool, it's a dashboard review and a handful of actions per month.

How to communicate this to clients

Many small business clients don't yet understand what Tranche 2 means for them. Position the conversation as: "We can handle this for you so you don't have to think about it."

The pitch is simple:

Most small business clients will say yes immediately. The penalty for non-compliance is up to $33 million โ€” compliance is not optional, and they'd rather pay an accountant they trust than figure it out themselves.

CompliDesk is built exactly for this.

One dashboard. All your clients. AML compliance managed at scale โ€” without spreadsheets or multiple logins.

Sign up free today

Related reading: Choosing AML compliance software ยท Ongoing customer monitoring best practices ยท AML compliance software cost guide ยท Frequently asked questions