AML/CTF and Tranche 2 FAQ

Tranche 2 extends AML/CTF obligations to newly regulated sectors including accounting, real estate, legal, and other professional services. Obligations commenced on 1 July 2026. Firms that were already providing designated services on that date must enrol with AUSTRAC by 29 July 2026; firms that start later must enrol within 28 days.

Firms that provide designated services under the AML/CTF Act, including many accounting and real estate businesses. If you are unsure, start with the readiness assessment.

Most firms need an AML/CTF program, an AMLCO, staff training, a due diligence process, record-keeping controls, and a way to report suspicious matters where required.

No. duely is not approved, endorsed, or certified by AUSTRAC. It is a workflow platform that helps firms structure compliance work and produce audit-ready records.

No. duely helps demonstrate procedures and decisions. Your firm remains responsible for its own compliance judgements and approvals.

Launch focus is on accounting firms and real estate agencies. Legal early access is available for firms that want updates as legal-specific workflows roll out.

You probably won't replace it. Most firms keep their existing search and document tools, and add duely as the compliance backbone. AUSTRAC won't ask your search tool for the matter file — they'll ask you.

Free trials are great until the regulator arrives. The free options we've reviewed bundle no automated KYC, no SMR XML, no evidence pack, and no reliance lifecycle. Low switching cost — but low regulatory protection.

CSV import for customer baselines. Document upload for evidence. Most firms run duely alongside their existing tools for a quarter, then consolidate.

We track every Rule amendment and Starter Kit update. Vertical packs are versioned. When the Rules change, you get a "what changed, what to do" diff against your program.

In duely, compliance obligations attach to a matter or engagement, not only to a general client profile. This makes scoping, risk, approval, retention, and evidence clearer for each designated service.

duely supports guided verification workflows with method-path capture, source references, and structured evidence. It supports safe harbour, non-safe harbour, and manual verification paths.

Guided verification workflows and evidence capture are available now. Automated provider verification is part of the product roadmap.

duely currently supports secure document requests and upload links. A full self-service portal with login and dashboard is on the roadmap.

duely supports customer and beneficial owner capture, controller mapping, and structure profiles for companies, trusts, and partnerships, with rationale and evidence attached to the matter.

An evidence pack is a versioned export of the key compliance record for a matter, including decisions, rationale, timestamps, approvals, and supporting context, with integrity hashing applied.

Suspicious matters are handled in an AMLCO-only shadow case workflow that is isolated from shared matter views to reduce tipping-off risk.

Submission-ready records and XML export for suspicious matter workflows are supported. End-to-end automated AUSTRAC submission is on the roadmap.

Your first month is on us — full access to every feature from day one with real data and real workflows. After month one you're billed at your plan's regular rate. Cancel anytime from your billing settings.

Yes. A card is required at signup so service continues uninterrupted after your first free month. You can change the payment method or cancel anytime from your billing settings.

Yes. Cancel from your billing settings and you'll keep access through the end of the current billing period. No long-term contract.

Yes, annual billing saves approximately 17%. Starter: $587.64/yr ($48.97/mo), Professional: $1,284.84/yr ($107.07/mo). All prices in AUD.

Matter records, documents, and evidence packs are stored in Australian data centres. Identity, biometric, and AML screening is performed by our specialist verification provider (Didit) outside Australia, in the European Union, on a process-and-purge basis — the identity and biometric data is deleted once the result is returned and is not retained by Didit. The resulting evidence is stored back in Australia. Didit is GDPR-compliant and ISO 27001 / SOC 2 (Type I) certified.

Only AMLCO-authorised users can access suspicious matter workflows and related records. No suspicious matter indicators appear on shared dashboards, matter lists, exports, or notifications.

No. duely provides workflow, record-keeping, and structured evidence support. Firms remain responsible for legal and compliance judgement.