The article
Your compliance officer has written the AML policy. Now the product has to carry it out: check every customer at signup, screen names against sanctions lists, watch the transactions and keep a file an examiner can read years later. That is what AML compliance solutions are for, and it is as much engineering as it is compliance.
I have built software for 18 years, and my team of 70+ specialists has delivered 150+ projects since 2017. We are not one of the AML compliance consulting firms, and we do not sell data. Your compliance officer decides who is too risky, what to monitor and what to report; we build and connect the software that applies those decisions and keeps a record of each one.
AML compliance solutions: the short version
| Question | Answer |
|---|---|
| Who decides | Your compliance officer: the risk rules, the cases and every report |
| What we build or connect | KYC and identity checks, business checks (KYB), sanctions and PEP screening, transaction monitoring, case management, records |
| Data and screening providers | The ones you choose, connected to your onboarding and payments; we build what none of them covers |
| Crypto | Wallet screening, blockchain analytics and travel rule tools, connected to your platform |
| Price | Estimated before work starts; the first call and the rough estimate are free |
Anti-money laundering compliance services, piece by piece
An AML program has six working parts, and each one leaves something an examiner can ask to see:
- KYC at onboarding. Identity verification runs at signup; the check, its result and the documents stay tied to the customer.
- Business checks (KYB). Who owns and controls a business customer, with the source of every answer.
- Sanctions and PEP screening. At signup and again when the lists change; a person reviews every possible match, and the decision is recorded.
- Transaction monitoring. Rules your compliance officer writes, tested on your own data, with an owner for every alert.
- Case management. The alert, the evidence, the notes and the decision in one file with a full audit trail.
- Records. Everything above, kept in a form that reports and examinations can use.
In October 2026 I read four of the pages Google shows for this search. Two promise to automate suspicious activity reports and to cut false positives, but neither gives a number for the false positives or says who decides that a report is due. None of the four names a price. A small sample, yet it shows what to ask any AML compliance provider: who decides, and how will we know the alerts went down?
Two FinCEN rules that shape the software
FinCEN's rule on suspicious activity reports by banks, 31 CFR 1020.320, has two lines that change how case software has to be built. Your compliance officer will tell you which rules apply to your company; the design questions stay the same.
- Five years. A bank keeps a copy of each SAR it files, with the original or business record of the supporting documents, for five years from the date of filing. In the software, that means the case file stays complete and unchanged at least that long, including after the customer leaves.
- No tipping off. No bank, and no director, officer, employee or agent of a bank, may disclose a SAR or any information that would reveal that one exists. So case screens are open only to the roles your officer names, support agents see nothing of an open case, and nothing in the customer's app changes because a case was opened.
Who files the report? Your compliance officer decides and files. Our part is that the case, the evidence and the record are complete when they do.
AML compliance software solutions: buy, integrate or build
Most AML stacks are a mix of data you subscribe to, platforms you configure and parts nobody sells. A useful way to split it:
| Part | Usually | Why |
|---|---|---|
| Identity documents and liveness checks | A provider's service | Providers maintain checks for many countries and document types |
| Sanctions, PEP and adverse media data | A provider's data | The lists change all the time; keeping them is a business of its own |
| Blockchain analytics | A provider's service | It needs a view of the whole chain, not only your wallets |
| Transaction monitoring rules | A platform, or rules built on your data | It depends on how unusual your product and your data are |
| Case management | Often built into your product | The evidence lives in your own data, and the officer needs it in one file |
| Reports and exports for examiners | Built | The format your officer works with, from the records you keep |
We integrate the providers into your onboarding and payments and build the parts no vendor covers. Compliance automation adds checks that collect the evidence while the work happens.
Sponsor banks, funds and crypto
Sponsor banks. A sponsor bank expects AML checks from each fintech partner and asks how they work. Our work for a fintech partner starts by mapping each of the bank's questions to a system and its evidence, so the answer is a report, not a promise.
Funds. Private equity funds need the same solutions for AML compliance, pointed at investors: identity, beneficial owners and sanctions screening when an investor subscribes.
Crypto. Exchanges, wallets and other crypto firms need solutions for AML compliance that also see the chain: wallet screening, blockchain analytics and the travel rule. Wallet screening and blockchain forensics services for AML compliance are products you subscribe to; we connect them to your platform and to your cases. We built Second Chance, a crypto trading platform with automated strategies, security first: funds and data are protected, and every transaction is monitored and shown to its owner.
AI on the alert queue
AI earns its place where people drown in alerts: grouping duplicates, summarizing a customer's history, ranking what to look at first. It stops before the decision. A person your officer names closes or escalates each case, and the record keeps both what the model suggested and what the person decided. If an AML compliance AI company promises that its model clears alerts alone, ask who answers to the examiner for each closed case.
Where your rules keep customer data inside your walls, the model can run there too. In the AI Call Center we built in the UAE, every call is processed by AI models hosted inside the country. Connecting a model to the systems you already run is AI integration.
What the price depends on
- the providers to connect and the countries you serve;
- your volumes: customers, transactions and alerts a month;
- how many case types and reports your compliance officer needs;
- whether the monitoring rules exist or have to be written with your officer.
Ask any provider whether data subscriptions are inside their price or billed by the data vendor. Our work is estimated before it starts; engineers who join your own team start from $35 an hour through staff augmentation. The first call and the rough estimate are free, and we sign an NDA before you send your policy.
If you are comparing AML compliance services, send us your policy and the providers you use or consider; we answer new requests within 30 minutes on weekdays, 9:00-18:00 Miami time. For the rest of a financial firm's controls, from access reviews to examiner reports, see financial compliance; for how long data is kept and how it is deleted, data management compliance. Everything else we do for regulated companies is on the compliance page.
