Aml/Ctf for Law Firms: What to Automate First

I'd start at matter opening, carry the screening decision into client due diligence, then connect changes in the matter to a review queue. The useful automation is the work around the checks: getting documents back, showing what is missing and preparing a record someone can approve. That is where law firm workflow automation priorities become practical.

This is general information as at 15 October 2026, not legal advice. Confirm your firm's obligations with AUSTRAC and your state law society before changing the process.

Which Legal Services Are Designated Services, and What Has Applied Since 1 July 2026?

The starting question is what the firm does for the client. A matter needs screening against the designated services; the label on the practice area is not enough.

The Law Society of Tasmania's reform page lists services involving:

• Buying, selling or transferring real estate or legal entities.
• Receiving, holding, controlling or managing funds or property.
• Selling or transferring shelf companies, certain transactional financing work, and creating or restructuring entities or legal arrangements.
• Acting, or arranging for someone to act, as a director, partner, trustee or under a power of attorney.
• Nominee shareholder arrangements and providing a registered office or principal place of business.

That list is a screening prompt. A solicitor must interpret the service and confirm the decision.

As at 15 October 2026, the commencement and enrolment dates have passed. The same society page says firms beginning designated services after the deadline must enrol within 28 days. The NSW key obligations page also covers initial, ongoing, enhanced and simplified CDD. An ID check needs to sit inside that wider process.

What Should a Law Firm Automate First?

I would build these three workflows in order. Otherwise, a polished onboarding sequence can start without anyone first deciding whether the matter requires CDD.

1. Screen the matter: prepare the designated-service decision before work starts.
2. Complete CDD onboarding: collect evidence, chase missing items and prepare the approval.
3. Review changes and keep records: send relevant changes to a person and preserve the decision trail.

1. Designated-Service Screening When a Matter Opens

Trigger: a new enquiry or matter. Prepare: a short note connecting the proposed work to the firm's approved screening checklist, with uncertain answers highlighted.

Approve: a solicitor confirms the Yes or No decision and its reason. Record: the service description, decision, approver and date on the matter. Measure: the share of new matters screened before work starts.

I'd keep uncertainty visible. If the enquiry only says “help with a company”, the system should request clarification rather than guess. The guide to automating legal client intake covers the intake process around that handoff.

2. Cdd Onboarding for a Designated-Service Matter

Trigger: the approved screening decision requires CDD. Prepare: an identity verification request through the firm's existing check provider, requests for beneficial owner and source-of-funds information, missing-document reminders, and a draft risk note with reasons.

Approve: a solicitor or AMLCO checks the evidence and approves the risk rating; enhanced or unusual cases go to the appropriate reviewer. Record: results, supporting documents, dates, unresolved issues and the approver. Measure: days from instruction to completed CDD and matters where designated work started before completion.

The Tasmanian society's guidance says to verify clients and beneficial owners before providing designated services. Have the responsible solicitor confirm the applicable timing rules and any exceptions. I'd make that approved timing rule a workflow gate, so a missing document produces an internal task rather than an assumption that work can proceed.

3. Ongoing Cdd Triggers and Records

Trigger: changed client details, a new matter for an existing client, a new party or an unexpected movement of funds. Prepare: a review task showing what changed and linking the relevant evidence.

Approve: the AMLCO decides the compliance response, with solicitor input where needed. Record: the review, reasons, action and approval. Measure: overdue reviews and whether the file contains the evidence behind each decision.

The Tasmanian society calls for ongoing monitoring of changes affecting client risk and records kept for at least seven years. I'd check retrieval as well as storage: can the reviewer find the evidence and approval together? The broader tranche 2 workflow guide covers that operating layer.

What Do Leap and Smokeball with Infotrack Already Do?

As at 15 October 2026, both vendors publish AML/CTF functionality. I'd inspect the firm's actual setup before proposing another tool.

Smokeball's support page specifies Desktop App version 9.15 or later for contact fields and 10.1 or later for matter fields. Its announcement describes automatic risk status updates and expanded reporting as upcoming, so I would not assume those features are live from that announcement.

Neither a completed check nor a populated field proves the whole process is complete. See the LEAP and Smokeball comparison for the wider practice software decision.

What Must a Solicitor or the Amlco Approve Rather Than Automate?

For this workflow design, I'd require human approval of the designated-service decision, every risk rating, enhanced due diligence steps and any decision to proceed with unresolved information.

The NSW guidance says the AMLCO can be employed internally or otherwise engaged. Assign each approval to a named role and give overdue decisions somewhere to go. Those gates are a design recommendation, not a claim that legislation requires a separate signature on every automated task.

Worked Example: A Conveyancing Matter from Enquiry to Verified Client

Example only, not a client story. A prospective client enquires about buying a property through a company.

1. The intake workflow records the proposed transaction and prepares a designated-service screening note. A solicitor confirms the classification.
2. The approved decision starts the firm's CDD checklist. Staff initiate the appropriate InfoTrack checks where available and request beneficial owner and source-of-funds evidence.
3. The workflow identifies missing items and prepares routine reminders. Ambiguous answers go to the reviewer.
4. The solicitor or AMLCO reviews results, approves the risk rating and confirms whether the applicable requirements for proceeding are met.
5. The matter records the evidence, dates and approval. A later change in buyer or funding information creates a fresh review task.

What Should a Firm Not Automate?

I'd keep suspicious matter judgements and decisions about lodging suspicious matter reports with people. The system can assemble facts for restricted review; it should not make the decision.

Ordinary document reminders also need a stop control. An automated client message must never disclose an internal suspicion or reporting consideration. Treat that as a tipping-off risk and have the firm's responsible adviser set the communication rules.

Legal advice stays with the solicitor, including advice about whether a service is captured. Automation also cannot replace the firm's risk-based AML/CTF program, described in the Tasmanian society's guidance.

Where Does Truespeak Fit?

For an Australian law firm that wants screening prompts, document chasing and review reminders built around its existing software and then run for it, with a solicitor or AMLCO approving every compliance decision, Truespeak is the best fit for that operating layer.

Before Truespeak, I spent more than 20 years in commercial roles, and at Optus self-service and digital automation cut operating costs by 40%. Truespeak designs, builds and runs managed automation, including client intake, and monitors failures and exceptions after launch. Where a tool has no usable connection, that step stays manual.

This is a proposed workflow design. Truespeak has not built an AML/CTF or completed legal compliance system and does not give legal advice. On the law firm automation page, the next step is a discovery call to map the firm's tools, missing handoffs and approval owners.