Skip to content

Law Enforcement and Regulatory Request Policy

Last Updated: 19 October 2026 | Version 2.3

As a provider of Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) compliance infrastructure, Ilixir Technologies Pty Ltd, trading as Duely ("Duely"), may periodically receive requests for data from law enforcement agencies, regulatory bodies (such as AUSTRAC), or via civil subpoenas.

This policy outlines how Duely handles such requests, with particular attention to our obligations and our Subscribers' obligations under Section 123 of the AML/CTF Act 2006 (Cth) ("Tipping Off").

1. Our Role as a Data Processor

Duely operates as a Data Processor. The Subscriber (the Firm) is the Data Controller and the primary owner of the matter data, verification records, and compliance logs held within the platform.

Our baseline policy is that law enforcement and regulatory agencies should seek data directly from the Firm concerned. Duely will not voluntarily disclose a Firm's data to third parties without a valid and binding legal demand, except where the law requires or permits it, including to lessen a serious threat to life, health or safety or to report suspected unlawful activity (clause 4A of the Master Subscription Agreement).

2. Handling Legal Demands

If Duely receives a valid subpoena, warrant, court order, or formal statutory notice (for example, an AUSTRAC Section 167 notice) demanding access to a Firm's data, the following applies.

2.1 Standard Procedure (Notice to Subscriber)

Unless prohibited by law, our standard procedure is to:

  1. promptly notify the Firm's designated Administrator or AMLCO of the request;
  2. provide the Firm with a copy of the legal demand;
  3. allow the Firm a reasonable opportunity (where the demand's deadline allows) to seek a protective order, quash the subpoena, or otherwise object to the disclosure in court; and
  4. if the Firm successfully quashes the demand, Duely will not turn over the data. If the Firm cannot quash the demand by the deadline, Duely will comply and provide the requested data.

2.2 Gag Orders and Non-Disclosure Requirements

Law enforcement requests in the AML/CTF context are frequently accompanied by non-disclosure orders (gag orders) prohibiting Duely from notifying the Firm that data has been requested.

  • Compliance: Duely will comply with valid gag orders issued by a competent court or statutory authority. We will not notify the Firm in these circumstances.
  • Scrutiny: Duely reviews each order (with external legal advice where needed) to confirm they are legally valid and properly scoped.

3. The Tipping Off Offence (s123 AML/CTF Act)

Section 123 of the AML/CTF Act makes "tipping off" a criminal offence. A person must not disclose information about a Suspicious Matter Report (SMR) given to AUSTRAC under section 41(2), including that a suspicion was formed, or about a notice given under section 49(1) or 49B(2), where the disclosure would or could reasonably be expected to prejudice an investigation.

If Duely receives a regulatory request for data that touches on SMRs or suspicious activity:

  • Duely acknowledges the sensitivity of this data;
  • Duely will review the request for s123 compliance; and
  • in scenarios involving gag orders or specific AUSTRAC notices, Duely will work directly with the requesting authority to provide the data without tipping off the Firm (so the Firm is not placed at risk of inadvertently tipping off the subject).

4. Format of Disclosed Data

When legally compelled to disclose data, Duely will provide it in standard, reasonably usable formats (for example, PDF Evidence Packs, CSV audit logs, or JSON data exports). Duely is not obligated to build custom reports or undertake forensic data analysis on behalf of the requesting agency unless specifically ordered by a court and compensated accordingly.

5. Contact for Law Enforcement

Law enforcement agencies and regulatory bodies seeking to serve legal process should direct inquiries and formal notices to our legal contact:

Email: legal@duely.com.au
(Service of legal process is only accepted via email if explicitly acknowledged in writing by Duely.)

Mail:
Ilixir Technologies Pty Ltd (ABN 11 680 039 392), trading as Duely
Attn: Legal
Registered office as recorded on the ASIC register, Queensland, Australia

(Formal service of legal process may be effected by registered mail to the above address or by email where explicitly acknowledged in writing by Duely.)

6. Governing Law

This Law Enforcement and Regulatory Request Policy is governed by the laws of Queensland, Australia.

7. Version History

  • 2.3 (19 October 2026): sections 1, 2, 3, 5 and 6 updated.
  • 2.2 (15 October 2026): the previous version.