The registers and the monitoring. Nothing you don't need.
Accountancy practices, law firms, estate agents: AML/CFT/CPF-supervised businesses run Vantage Point at modular scope. The registers, the risk assessment and the monitoring, without the machinery built for a bank.
The situation
An AML-supervised practice: accountancy, legal, estate agency. The gifts register is a spreadsheet, the risk assessment is a Word document, and monitoring is a calendar reminder.
- The register estate (gifts, conflicts, declined business, CDD reliance) is a folder of spreadsheets.
- The business risk assessment gets dusted off annually and evidenced never.
- Supervision visits mean a scramble to reconstruct what was actually done.
| Entry | Entity | Submitted by | Status |
|---|---|---|---|
| Trust distribution made without proper authorisation | Meridian Trust Company Ltd | Sarah Beaumont | Active |
| NAV misstatement — stale pricing on illiquid bond | Meridian Fund Services Ltd | Sarah Beaumont | Active |
| Delayed SAR filing — exceeded 24-hour reporting window | Meridian Trust Group Ltd | James Le Masurier | Active |
| Investor subscription processed without completed AML checks | Meridian Fund Services Ltd | Sarah Beaumont | Complete |
| Unauthorised disclosure of client information via email | Meridian Trust Group Ltd | James Le Masurier | Complete |
How Vantage Point runs it
- 01
Start with the registers: replace the gifts, conflicts, declined-business and reliance spreadsheets with pre-built, versioned registers first.
- 02
Stand up the AML business risk assessment against the pre-built taxonomy, scoped to what the practice actually does.
- 03
Schedule the monitoring at the cadence that fits; a failed check raises the action automatically.
- 04
Grow into the full workflow if and when the practice needs it. Use what you need; the rest stays out of the way.
Outcome
An evidenced AML function on the day of the visit, not a reconstruction of one.
Modular scope is deliberate: a DNFBP does not need obligations coverage built for a fund administrator. Land on the registers, and the rest of the platform is there when the function grows.
At AML scope that means the pre-built registers (breaches, complaints, gifts and entertainment, conflicts, and the PEP and sanctions registers you build with the form builder), the business risk assessment scored against your own appetite, an AML-scoped monitoring programme, and the AML/CFT/CPF obligations from the regulatory library. Which registers a regulated firm keeps, and what each records, is in The registers a regulated firm keeps.
- Fourteen pre-built registers; build any register you like
- Modular scope: pay attention to what applies, ignore what doesn't
- One audit trail on every entry
Your existing registers and data come in during onboarding, and your administered book can sync from the systems you already run. Live in days, not months.
How you get startedQuestions from AML-supervised businesses.
- We are only supervised for AML. Do we need the whole system?
- No. Modular scope means AML/CFT/CPF-supervised firms such as accountancy practices, law firms and estate agents run the obligations, the compliance risk assessment, the SAR, PEP and sanctions registers and an AML-scoped monitoring plan, without the prudential and conduct machinery built for a bank.
- Is every module still available?
- Yes. Every module is on every plan; scope is what you choose to run. When supervision widens, the wider scope is switched on rather than bought.
- Which registers do AML-only firms usually run?
- Gifts and entertainment, conflicts, breaches, complaints and the registers you build for SARs, PEPs and sanctions screening outcomes, each with configurable fields, alerts and an audit trail.
- How does the risk assessment work at this scope?
- The pre-built taxonomy is filtered to the AML/CFT/CPF risks that apply, scored inherent and residual against your own appetite bands, with the controls you actually operate driving the residual figure.
- How quickly can a practice be live?
- Days. The registers and the risk assessment come first, imported from your spreadsheets and checked with you; the monitoring plan follows in the first month.
In the platform, and in the guides.
- GuideSpreadsheets versus a compliance management system: what changes, and what does not
- GuideWhat a compliance monitoring programme should contain
- GuideInherent, residual and appetite: scoring risk in a compliance function
- ModuleRegisters: Pre-built registers. Configurable fields.
- ModuleRisks: Inherent. Residual. Entity-scoped.
- ModuleCMP: Doing it right.
- ModuleRegulatory library: Pre-built. Kept current.
See it running on your structure.
A 30-minute walkthrough using your entities, your licences and a real workflow you bring to the call. No slide deck.