AML/CTF and Tranche 2 FAQ
Answers to common questions about Tranche 2 readiness, how duely works, what is live today, and where the product is heading next.
About Tranche 2
What is Tranche 2 and when did it start?
Tranche 2 extends AML/CTF obligations to newly regulated sectors including accounting, real estate, legal, and other professional services. Obligations commenced on 1 July 2026. Firms that were already providing designated services on that date must enrol with AUSTRAC by 29 July 2026; firms that start later must enrol within 28 days.
Which firms are most likely to be affected?
Firms that provide designated services under the AML/CTF Act, including many accounting and real estate businesses. If you are unsure, start with the readiness assessment.
What do firms need in place now that obligations are live?
Most firms need an AML/CTF program, an AMLCO, staff training, a due diligence process, record-keeping controls, and a way to report suspicious matters where required.
About duely
Is duely approved or endorsed by AUSTRAC?
No. duely is not approved, endorsed, or certified by AUSTRAC. It is a workflow platform that helps firms structure compliance work and produce audit-ready records.
Does duely guarantee compliance?
No. duely helps demonstrate procedures and decisions. Your firm remains responsible for its own compliance judgements and approvals.
Which industries does duely support?
All five Tranche 2 verticals are live: accounting firms, real estate agencies, conveyancers, law firms, and jewellers and bullion dealers. Each has its own versioned program template and designated-service catalog, and the legal vertical includes the privilege-aware suspicious matter workflow.
We already use a practice-management tool with compliance features. Why add duely?
You probably won't replace it. Most firms keep their existing search and document tools, and add duely as the compliance backbone. AUSTRAC won't ask your search tool for the matter file. They'll ask you.
Some platforms have free tiers. Why pay?
Free trials are great until the regulator arrives. The free options we've reviewed bundle no automated KYC, no SMR XML, no evidence pack, and no reliance lifecycle. Low switching cost, but low regulatory protection.
How do we migrate existing customer records?
CSV import for customer baselines. Document upload for evidence. Most firms run duely alongside their existing tools for a quarter, then consolidate.
What if AUSTRAC changes the Rules or updates its guidance?
We track every Rule amendment and Starter Kit update. Vertical packs are versioned. When the Rules change, you get a "what changed, what to do" diff against your program.
Workflow and features
What does matter-first compliance mean?
In duely, compliance obligations attach to a matter or engagement, not only to a general client profile. This makes scoping, risk, approval, retention, and evidence clearer for each designated service.
How does duely handle identity verification?
duely supports guided verification workflows with method-path capture, source references, and structured evidence. It supports electronic, documentary, and manual verification paths.
Does duely include automated provider verification?
Yes. Automated identity verification is live and included from the Starter plan, white-labelled as duely Verify. It is a hosted check covering liveness, document capture, and face-match, with the result and evidence written straight into the matter. Guided manual verification is available for cases where a hosted check isn't appropriate. Automated sanctions, PEP, and adverse-media screening is included from the Professional plan.
Does duely have a client portal?
duely currently supports secure document requests and upload links. A full self-service portal with login and dashboard is on the roadmap.
How does duely handle beneficial owners and complex entities?
duely supports customer and beneficial owner capture, controller mapping, and structure profiles for companies, trusts, and partnerships, with rationale and evidence attached to the matter.
What is an evidence pack?
An evidence pack is a versioned export of the key compliance record for a matter, including decisions, rationale, timestamps, approvals, and supporting context, with integrity hashing applied.
How does duely handle suspicious matters?
Suspicious matters are handled in an AMLCO-only shadow case workflow that is isolated from shared matter views to reduce tipping-off risk.
Does duely automate AUSTRAC submissions?
Submission-ready records and XML export for suspicious matter workflows are supported. End-to-end automated AUSTRAC submission is on the roadmap.
Pricing and billing
Is there a free trial?
There's no free trial, but every plan gives you full access from day one. You can cancel anytime from your billing settings and keep access to the end of your current billing period. The launch offer of a free first month ended in August 2026. Cancellation and refund terms are set out in our Refund and Cancellation Policy.
Do I need a credit card to sign up?
Yes. A card is required at signup and billing starts with your first subscription period. You can change the payment method or cancel anytime from your billing settings.
Can I cancel anytime?
Yes. Cancel from your billing settings and you'll keep access through the end of the current billing period. No long-term contract.
Do you offer annual billing?
Yes, annual billing saves approximately 17%. Starter: $587.64/yr ($48.97/mo), Professional: $1,284.84/yr ($107.07/mo). All prices in AUD.
Security and trust
Where is data stored?
Matter records, documents, and evidence packs are stored in Australian data centres. Identity, biometric, and AML screening is performed by our specialist verification provider, white-labelled as duely Verify, outside Australia in the European Union on a process-and-purge basis: the live selfie captured for face-match is destroyed within 7 days of capture (or immediately if a staff member records an override), and only the face-match verdict, document hash, and document row survive as the statutory record. The resulting evidence is stored back in Australia. The provider is GDPR-compliant and ISO 27001 / SOC 2 (Type I) certified.
Who can see suspicious matter information?
Only AMLCO-authorised users can access suspicious matter workflows and related records. No suspicious matter indicators appear on shared dashboards, matter lists, exports, or notifications.
Does duely provide legal advice?
No. duely provides workflow, record-keeping, and structured evidence support. Firms remain responsible for legal and compliance judgement.
Not sure where your firm stands?
Take the 2-minute readiness assessment to see where your firm stands now that Tranche 2 is live.