You Can't Outsource Accountability. But You Can Co-Source the Hard Work.

Tranche 2 introduces a reputational risk most firms haven't considered. Your AMLCO owns the program - iDeed runs it. Here's what co-sourcing compliance actually looks like.

tranche 2 aml/ctf compliance co-sourcing client experience
Justin Amos

By Justin Amos, Co-Founder & CEO, iDeed Pty Ltd

The views expressed in this article are those of the author and reflect our interpretation of AUSTRAC’s published guidance and the AML/CTF Act as at June 2026. This article is general in nature and does not constitute legal advice. If you have questions about how the reforms apply to your specific practice, get in touch at ideedworks.com.au.

Part of the iDeed Beyond the Checkbox series


You’ve spent years building your reputation.

Not just as a technically competent practitioner - but as someone clients trust with their most complex, sensitive and consequential matters. They chose you because you get it right. Because when something important needs to be handled properly, you’re the person they call.

That reputation is your most valuable asset. And it took years to build.

Tranche 2 introduces a new risk that most firms haven’t fully considered yet. Not just the risk of a regulatory penalty - though that’s real. But the risk of getting something wrong in front of a client at exactly the moment they’re forming their opinion of you.

A verification process that feels suspicious. A request that goes to the wrong person. A determination that’s incorrect. A new client relationship that starts with friction, confusion and doubt instead of confidence and trust.

Get this wrong and it leaves a mark. Clients talk. Reputations take years to build and moments to damage.

What AUSTRAC actually requires from your firm

Let’s be clear about what the framework requires - because there’s real confusion in the market.

From 1 July 2026 your firm must:

  • Have an AML/CTF program approved by your governing body
  • Appoint a senior manager accountable for AML/CTF compliance
  • Designate an AML Compliance Officer (AMLCO) responsible for the program day to day
  • Conduct Personnel Due Diligence (PDD) on anyone in AML/CTF roles
  • Perform Customer Due Diligence on clients before providing designated services

These obligations sit with your firm. You cannot outsource them. Your AMLCO is accountable. Your governing body approves the program. Your senior manager owns the oversight.

That is entirely appropriate. Accountability should sit with the firm.

But here’s what most providers won’t tell you - accountability and expertise are two very different things.

Accountability and expertise are not the same thing

Your AMLCO doesn’t need to be a compliance expert overnight. They need to be accountable. The expertise - the technology, the analysts, the day to day workload - that can be co-sourced.

That’s exactly what iDeed provides.

Your AMLCO owns the program. iDeed runs it. Your governing body approves it. iDeed builds it. Your senior manager is accountable for outcomes. iDeed delivers them.

Your firm stays lean. Your appointed roles stay in place. And the heavy lifting - the UBO determinations, the trust deed analysis, the ownership structure investigations, the PEP and sanctions screening, the document collection, the audit trail - gets done by specialists who do this every day.

For a firm focused on delivering high touch, competent service to its clients, co-sourcing the compliance function to iDeed is far more cost effective than hiring even a single part-time compliance analyst - and far lower risk than doing it internally with no experience.

The experience your clients deserve

Let’s look at what poor CDD UX actually looks like in practice - and what it should look like instead.

Without the right approach - the cascade

This week one of our own directors received an automated email from their accountant’s compliance platform. No context. No explanation. No familiar branding. Just a URL to click.

It looked like a scam. So they didn’t click it.

They complained to the accountant asking for an explanation. That complaint is now sitting in a Senior Partner’s inbox. The CDD process hasn’t started. The engagement is stalled. Nobody is billing anyone. And the relationship - before a single piece of work has been delivered - is already under strain.

Now imagine that same cascade - but the verification request went to the wrong person entirely. A shareholder incorrectly identified as a UBO or Senior Managing Official by an automated system that misread the cap table. Now they’re confused, suspicious and annoyed. And the firm still isn’t compliant.

That is the full cost of getting this wrong. Fear. Inaction. Complaint. Delay. A bad first experience. And potentially a compliance failure hiding underneath it all.

With iDeed - the concierge experience

Think about a great hotel check-in. Everything just works. You’re expected. You’re welcomed. The complexity behind the scenes - the bookings, the logistics, the coordination - is completely invisible to you. You just feel looked after.

That is exactly what iDeed delivers for your clients’ Directors, UBOs and Authorised Persons.

A verification request arrives with clear plain-English explanation of what’s required and why - from a platform that feels professional and trustworthy, not suspicious. It goes to exactly the right people - because our analysts have already completed the ownership investigation and know precisely who needs to be verified and who doesn’t. It is completed quickly, unobtrusively and securely.

No fear. No confusion. No complaints. No delay.

Just a smooth, professional first experience that reflects the quality of the firm they chose to work with - and a green light to start billing.

The lasting impact of getting it wrong

We don’t say this to alarm you. We say it because it’s true and because you deserve to go into this with your eyes open.

A wrong UBO determination isn’t just an administrative inconvenience. It’s a compliance failure that sits on your file. A clunky verification process that feels suspicious to your client’s Director or UBO doesn’t just cause friction - it raises questions about your professionalism at exactly the moment you need their confidence. A missed ECDD trigger doesn’t just create a gap in your records - it creates a regulatory exposure that you own, not your software vendor.

The firms that will look back on 1 July 2026 with confidence are not the ones that scrambled with a bolt-on tool and hoped for the best. They’re the ones that treated this as what it actually is - a professional obligation, a client experience and a reputational matter - and got properly set up before the deadline arrived.

You’ve spent years getting it right. This shouldn’t be the moment that tests it.

The urgency is real

1 July 2026 is weeks away.

Your AML/CTF program needs to be written and approved by your governing body. Your AMLCO needs to be appointed. Your CDD process needs to be operational. If you haven’t started, you’re already behind.

That’s not a scare tactic. It’s just the reality of where the deadline sits.

What co-sourcing with iDeed actually looks like

  • Your AMLCO is appointed and accountable - iDeed supports them with expertise and technology
  • Your governing body approves the program - iDeed builds it with you
  • Your clients receive professional, secure, clearly explained verification requests through iDeed’s purpose-built portal
  • Complex ownership structures, trust deeds, UBO determinations - iDeed’s analysts handle the work
  • PEP and sanctions screening - done properly, with context and expertise
  • Audit-ready documentation - every verification fully recorded and defensible
  • Credit-based pricing - you only pay for completed verifications, not a licence sitting idle
  • Full AUSTRAC compliance from as little as $2,000 per year

You can’t outsource accountability. But you can co-source the hard work - and give your clients an experience that reflects the quality of the firm they chose to work with. Book a 15 minute call at ideedworks.com.au - no pressure, just a straight conversation.


Justin Amos is Co-Founder and CEO of iDeed Pty Ltd, operators of ARCaml, an AML/CTF compliance platform built for Australian designated service providers. ideedworks.com.au

The views expressed in this article are those of the author and reflect our interpretation of AUSTRAC’s published guidance and the AML/CTF Act as at June 2026. This article is general in nature and does not constitute legal advice. If you have questions about how the reforms apply to your specific practice, get in touch at ideedworks.com.au.

Explore the full Beyond the Checkbox series at ideedworks.com.au/blog

Justin Amos

Justin Amos

Co-Founder & CEO, iDeed Pty Ltd

Justin is Co-Founder and CEO of iDeed, operators of ARCaml - an AML/CTF compliance platform built for Australian designated service providers.

Connect on LinkedIn
✓ Verified

AUSTRAC Aligned

Australia's official AML/CTF regulator standards

★ Expert

Industry Experts

Verified compliance specialists

↻ Live

Always Updated

Current with 2026 regulations