Skip to content

Workflow

Onboard the customer once. Reuse the work on every engagement.

In duely, due diligence belongs to the customer: consent, identity, screening and a risk profile, done once. Each engagement starts from that, adds its own risk assessment, and goes to an approver for sign-off: your AML/CTF compliance officer (AMLCO), or a user with the Approver role.

  1. Stage 1 Onboard the customer
  2. Stage 2 Open the engagement
  3. Stage 3 Assess risk
  4. Stage 4 Approve and conclude

Accounting firms

An engagement is an engagement in duely

New audit engagement for Acme Pty Ltd

Real estate agencies

A sale or purchase is an engagement in duely

Property sale: 42 Smith St, Bondi

Legal and conveyancing

A matter is an engagement in duely

Estate planning: Chen family

Every firm type works in engagements. You choose your firm type once, during setup, and the program template, risk questions and reports follow from it. Before your first customer, you set up your AML/CTF program and appoint your AMLCO.

The whole workflow, narrated

A 55-second walkthrough of duely, from onboarding a customer to the evidence pack, with narration and captions.

duely in under a minute

Stage 1

Onboard the customer

Done once per customer and reused on every later engagement.

Staff and the customer

  • Add the customer. An individual is emailed a consent form straight away.
  • For a company, trust, SMSF or partnership, record who owns and controls it. duely works out who must be checked: anyone with 25% or more, and anyone with a control role.
  • Each person signs consent and verifies from their own phone with an ID document and a selfie. Staff can also record a manual check. After either check, staff can run an optional DVS check. Identity documents are checked in real time against the issuing agency's records through the Attorney-General's Department's Document Verification Service.
  • Each person is screened against sanctions lists and politically exposed person (PEP) lists, with adverse-media screening with the person's consent or as part of enhanced due diligence. A false positive is dismissed with a written reason. A confirmed match goes to an approver.
  • Sign-off records the customer's risk profile and the date their next review is due.

Kept on record

Signed consent · Identity method, result and reference · Screening outcomes and decisions · Ownership and control structure · Risk profile (the customer baseline)

Stage 2

Open the engagement

The unit of work. duely calls it an engagement, a transaction or a matter, depending on your firm type.

Staff

  • Add the customers involved and the role each one plays.
  • Choose the services. An engagement can carry several, designated or not, and it is in scope if any one is designated. The options come from your AML/CTF program.
  • Each customer's existing due diligence is attached automatically. Staff can opt a customer out and redo it.

Kept on record

Customers and roles · Services and scoping decision · The due diligence version relied on

Stage 3

Assess risk

Answer AUSTRAC's questions. duely returns the rating and shows what drove it.

Staff

  • Answer the AUSTRAC starter kit questions for the engagement and for each customer. An engagement with no designated service skips this stage.
  • duely rates each customer from the answers, and the engagement takes the highest customer rating.
  • Enhanced due diligence opens if the rating is High, and also for a PEP answer, a confirmed sanctions hit or a failed identity verification. It covers source of funds and source of wealth, with documents attached, and an approver signs it off.

Kept on record

Answers to the risk questions · Calculated rating and its drivers · ECDD case, documents and decision (when ECDD opens)

Stage 4

Approve and conclude

An approver signs off before the work goes ahead.

Staff and an approver

  • Request approval. An approver (the AMLCO, or a user with the Approver role) reviews the engagement, and once approved it is live. Every engagement goes through approval. For one with no designated service, the approval signs off the scoping decision.
  • Generate the evidence pack when you need it: a versioned PDF with a SHA-256 hash, so a later change is detectable.
  • Conclude the engagement when the work is finished. This sets the retention anchor date and frees a flex customer slot. Included slots are one-time use.

Kept on record

Approval, approver and timestamp · Versioned, hashed evidence pack · Retention anchor

What your customer sees

The whole check runs on their own phone, from a link you send. These are the real screens.

  1. The first screen of the duely identity check on a phone, listing ID verification and face verification and showing an estimate of about one minute.

    1Open the link

    Two parts, an ID check and a face check. About a minute.

  2. The document choice screen, with a country selector and a list of document types including passport and driver's licence.

    2Choose a document

    Pick the country, then the document they have to hand.

  3. The prepare your document screen, with an upload area and a button to take a photo of the front side.

    3Prepare the document

    Upload a file, or take a photo of each side.

  4. The camera screen for scanning an identity document, with a frame to position the card and tips on lighting.

    4Scan the ID

    Guided capture, with a prompt to avoid screen captures.

  5. The prepare for the camera screen, explaining that a selfie will be taken and how to position the face.

    5Get ready for the selfie

    A short prompt before the camera opens.

  6. The selfie capture screen, with an oval frame for the face.

    6Take a selfie

    A face check confirms it is really them.

  7. The final screen of the identity check, confirming the customer has been verified.

    7Verified

    The result lands on the customer's record.

How each Tranche 2 obligation is covered

Tranche 2 obligations follow the designated service you provide, not the account or payment a bank monitors. duely records each one against the engagement it belongs to.

duely does not monitor transactions or detect suspicious activity automatically. Forming a suspicion stays with your AMLCO, and your firm lodges its own reports.

  • Designated services

    In duely:Each engagement records the designated service it covers, and the obligations follow from it

    Record kept:Scoping decision and rationale for every engagement

  • AML/CTF program

    In duely:Program wizard with versioning and approval, gated on the AMLCO appointment

    Record kept:Approved program PDF, hashed, with its version history

  • Governance and the AMLCO

    In duely:AMLCO console, escalation register and a compliance calendar of every dated obligation

    Record kept:Escalations, decisions and who made them

  • Customer due diligence

    In duely:Identity verification, beneficial owners, and sanctions and PEP screening, held on the customer and attached to each new engagement

    Record kept:Verification method, source references and screening decisions

  • Enhanced due diligence

    In duely:Opens on a High risk rating or a sanctions match, and covers source of funds and source of wealth

    Record kept:Actions taken, the outcome and senior sign-off

  • Ongoing due diligence

    In duely:Scheduled and event-driven re-reviews with AMLCO sign-off

    Record kept:Review checklist and the event that triggered it

  • Suspicious matter reports

    In duely:Staff raise unusual activity. The AMLCO decides whether to report, and prepares the SMR as AUSTRAC SMR XML

    Record kept:A case only the AMLCO can see. Your firm lodges through AUSTRAC Online

  • Threshold and cross-border reports

    In duely:Threshold transaction and cross-border movement registers with deadline reminders

    Record kept:Register entries. Your firm lodges through AUSTRAC Online

  • Training and personnel due diligence

    In duely:Training assignments with comprehension questions, and personnel checks

    Record kept:Training currency per person and a training report

  • Effectiveness testing

    In duely:Quarterly checks, corrective actions and independent evaluation tracking

    Record kept:Test results and the corrective-action history

  • Record keeping

    In duely:Seven-year retention anchored to each engagement

    Record kept:Append-only audit log and versioned evidence packs

Available at any point

These sit outside the four stages, so staff can use them whenever they are needed.

  • Request documents

    Ask a customer for a document through the portal at any stage. They upload it from a link and it lands on their record.

  • Record a threshold transaction report

    When physical cash of $10,000 or more is involved, capture a draft threshold transaction report (TTR) against the engagement, and record the AUSTRAC submission reference once it is lodged outside duely.

  • Report unusual activity

    Any staff member can raise it. It goes to the AMLCO, who decides whether to file a suspicious matter report (SMR) and exports it as an AUSTRAC SMR 3.0 XML file. Staff never see the decision.

Set up duely for your firm

Start with your AML/CTF program and your first customer, or check what duely would cost your firm first.