For accountancy practices and tax advisers
From risk assessment to monitoring review.
Sixteen ready-to-use tools for anti-money laundering, due diligence and practice compliance, built with accountants who have prepared for supervisory visits and answered to their professional body. Excel workbooks with a worked example and a user guide for every one.
Built for the people who answer to the supervisor
Money laundering reporting officers
A documented risk assessment, due diligence and a decision record for every client.
Sole practitioners
The policies, checks and logs a supervisor expects, without a compliance team.
Practice managers
One calendar for every compliance task, and a dashboard that shows what's slipping.
The toolkit
Sixteen tools, from risk assessment to monitoring review
Every tool is a ready-to-use Excel workbook with a filled-in worked example and a PDF user guide. Buy one tool, a bundle of four or the whole desk.
Client risk assessment bundle
Assess every client, and keep it current.Client AML risk assessment
A documented risk assessment for every client.
CO-01 assesses each client's money laundering risk across eight factors (client type and structure, ownership, sector, countries involved, how you deal with them, services, cash and source of funds), plus any PEP or sanctions concern. It scores and rates each client Low, Medium or High, sets the level of due diligence and the next review date, and lists high-risk clients and overdue reviews.
Who it's for: Partners, the MLRO and anyone who takes on or reviews clients.
You enter: Factors, PEP or sanctions concern, Assessed on, Thresholds.
You get: Score, Risk rating, Due diligence, Next review.
Tabs: Summary · Assessments
Risk factor guide
Consistent risk ratings, whoever does the assessment.
CO-02 is a guide to the risk factors used in CO-01: the question to ask for each factor and what Low, Medium and High usually look like. It helps everyone in the practice rate clients the same way.
Who it's for: Anyone rating client risk in CO-01.
You enter: Factor, Question, Examples, Your notes.
You get: Guide, Factors, Consistency, Training.
Tabs: Summary · Factor guide
Risk review scheduler
Risk assessments kept current, not filed and forgotten.
CO-03 schedules each client's next risk review from their rating and last assessment, and flags any trigger event, such as a change of ownership, a new service or an unusual transaction, that means a review is needed now.
Who it's for: The MLRO and client managers.
You enter: Risk rating, Last assessed, Trigger event, ID last verified.
You get: Next review, Review now, Overdue, Due soon.
Tabs: Summary · Reviews
High-risk client register
Your highest-risk clients, watched closely.
CO-04 lists every High-risk client with why they are high risk, the enhanced measures applied, who approved acting for them and when, and how often they are monitored. It flags clients without approval and monitoring that is due.
Who it's for: The MLRO and the partner responsible for high-risk clients.
You enter: Why high risk, Enhanced measures, Approved by, Monitoring.
You get: Next monitoring, Needs approval, Monitoring due, High-risk clients.
Tabs: Summary · High risk
Due diligence checks bundle
Identity, ownership and screening, on record.Customer due diligence record
Every identity check done and on record.
CO-05 records customer due diligence for everyone connected to each client: individual clients, directors, partners and owners. For each person it records the ID document, how it was checked and the dates identity, address, PEP and sanctions were checked, and flags anyone whose checks are incomplete.
Who it's for: Whoever carries out client identity checks.
You enter: Person, ID document, How checked, Dates.
You get: Checks done, Status, Complete (%), Incomplete.
Tabs: Summary · Due diligence
Beneficial ownership register
Know who really owns your company clients.
CO-06 records the beneficial owners of each company client, how they control it, whether that matches the register of people with significant control, and whether their identity has been verified. It flags discrepancies to report and owners still to verify.
Who it's for: Whoever onboards and reviews company clients.
You enter: Holding, Control through, Matches the register, Identity verified.
You get: Status, Owners recorded, Discrepancies, To verify.
Tabs: Summary · Owners
PEP and sanctions check log
Screening done, matches resolved, re-checks on time.
CO-07 logs every politically exposed person, sanctions and adverse media check: who, which client, when, the source and the result. It flags possible matches to resolve, confirmed matches for the MLRO, and re-checks that are due.
Who it's for: Whoever screens clients and the MLRO.
You enter: Check, Result, Source or tool, Re-check every.
You get: Next check, Status, By result, Action list.
Tabs: Summary · Checks
Enhanced due diligence checklist
Enhanced due diligence done properly, and provably.
CO-08 is the enhanced due diligence checklist for one high-risk client: senior approval, source of funds and wealth, ownership and identity, the purpose of the relationship and ongoing monitoring. Essential items not done are blockers, and the MLRO and partner sign it off.
Who it's for: The MLRO and partner responsible for a high-risk client.
You enter: Status, Evidence, Essential, Due.
You get: Complete, Blockers, Overdue, Sign-off.
Tabs: Summary · Checklist · Sign-off
Practice-wide risk bundle
The framework your supervisor expects to see.Practice-wide risk assessment
The practice-wide risk assessment your supervisor asks for.
CO-09 is the practice-wide money laundering risk assessment: the risks from your clients, services, countries, delivery channels and transactions, each scored for likelihood and impact, the controls in place and how effective they are, and the residual risk that remains. It shows when the assessment was last reviewed and when it is next due.
Who it's for: The MLRO and the partners.
You enter: Likelihood, Impact, Controls, Controls are.
You get: Inherent score, Residual score, Residual risk, Review due.
Tabs: Summary · Risks
AML policies and procedures checklist
Your AML framework, complete and evidenced.
CO-10 checks that the practice's anti-money laundering framework is in place: responsibilities (MLRO, supervisor, compliance partner), written policies, procedures for risk assessment, identity checks, monitoring and screening, and the records, reporting and training that go with them.
Who it's for: The MLRO and partners.
You enter: Status, Evidence, Essential, Due.
You get: Complete, Blockers, Overdue, Sign-off.
Tabs: Summary · Checklist · Sign-off
Data protection register
Know what personal data you hold, and why.
CO-11 is the practice's record of processing: each activity, the personal data involved, the lawful basis, who has access, where it is kept and for how long. A second tab logs data breaches. It flags activities due a review and shows when the ICO registration renews.
Who it's for: The data protection lead and partners.
You enter: Lawful basis, Kept for, Last reviewed, Breach.
You get: Due a review, Breaches, High-risk breaches, ICO renewal.
Tabs: Summary · Processing · Breaches
Compliance calendar
Every compliance task done on time, every year.
CO-12 lists every recurring compliance task (supervisor returns, risk assessment and policy reviews, training, insurance and registration renewals, monitoring and file reviews) with how often it recurs and when it was last done, and shows what is overdue and due in the next 30 days.
Who it's for: The MLRO, compliance partner or practice manager.
You enter: How often, Last done, Owner, Task.
You get: Next due, Overdue, Due soon, Tasks.
Tabs: Summary · Calendar
Training and reporting log bundle
Train the team and record every decision.Training log
Everyone trained, and the evidence to prove it.
CO-13 logs every training session: who, the topic, date, hours, provider and certificate. It shows each person's most recent anti-money laundering training and whether it's overdue, and totals CPD hours for the year.
Who it's for: The MLRO and practice manager.
You enter: Topic, Hours, Certificate, Refresh every.
You get: Last AML training, AML status, CPD hours, Sessions.
Tabs: Summary · Training
Internal suspicious activity report log
Every suspicion raised, decided and recorded.
CO-14 is the MLRO's confidential log of internal reports of suspicion: when raised, by whom, the client reference, the concern, the MLRO's decision and reasons, and the NCA reference where a report is made. It flags reports awaiting a decision and decisions overdue.
Who it's for: The MLRO only.
You enter: Client ref, Concern, MLRO decision, Reasons.
You get: Days open, Status, Reported, Awaiting.
Tabs: Summary · Reports
Compliance monitoring review
Proof your AML procedures work in practice.
CO-15 records an annual compliance review of a sample of client files: whether each has an in-date risk assessment, identity and address evidence, verified owners and a signed engagement letter. It works out the compliance rate, counts gaps by check and tracks the actions to fix them.
Who it's for: The MLRO or compliance partner doing the annual review.
You enter: Checks, Finding, Action, Fixed on.
You get: File compliant, Compliance rate, Gaps by check, Open actions.
Tabs: Summary · Review
Compliance dashboard
Compliance health on one page.
CO-16 brings the key compliance measures together: due diligence complete, risk assessments in date, reviews overdue, screening matches, training, internal reports, the practice-wide assessment, monitoring actions and PSC discrepancies. Each is rated red, amber or green against thresholds you set.
Who it's for: The MLRO and partners.
You enter: This month, Green if within, Amber if within, Better if.
You get: Status, Measures red, Red and amber list, Info.
Tabs: Summary · Measures
See inside
Real screens from the workbooks
Taken straight from the tools with the worked example filled in, so you can see exactly what you get before you buy.
In every tool
How it works
1 — Download
Buy a single tool, a bundle or the whole desk. Each one is licensed to your practice and sent by email.
2 — Set up once
Set your risk factors and scoring, then add your clients, using the user guide.
3 — Assess and evidence
Assess every client, run the checks and keep the evidence your supervisor will ask for.
Pricing
Buy what you need, or get everything
Single tool
£95–£295
One workbook with its user guide and worked example.
Start here
Bundle of four
£395–£495
Four tools that work together. The client risk assessment bundle is the place to start.
Full Compliance Desk
£1,495
All 16 tools and guides, yours to keep, with 12 months of updates and the monthly Q&A call. Then £395 a year to keep updating.
The Full Suite
£5,950
All six desks and all 96 tools, yours to keep, with 12 months of updates and the monthly Q&A call. Then £1,190 a year to keep updating.
Founding members: £4,450, with updates at £890 a year for life, for the first 50.
Set-up service
Your figures loaded for you · from £1,500
We load the tools with your own clients, services, fees, team and rates, so they're ready to use from day one.
Prices exclude VAT. Single tools, bundles and desks are for one practice and yours to keep. See pricing for every desk
Written by people who have done the job
The Compliance Desk is built with accountants who have written practice-wide risk assessments, run due diligence and taken practices through supervisory visits.
Every tool is built from that experience: the records and controls a well-run practice relies on, in a form you can pick up and use the same week.
Become a founding member
The first 50 founding members get The Full Suite, all six desks and 96 tools, for £4,450 instead of £5,950, with updates at £890 a year fixed for life.