5 must-haves when choosing your AML compliance software

If you're shopping for AML compliance software in New Zealand, you've probably already noticed the market is loud, the demos all look identical, and every vendor will tell you they're "the most trusted in the industry."

Cut through it. Here are the five must-haves that matter when you're choosing a platform.

1. It meets full government regulations - and keeps up as they change

The AML/CFT Act regulatory framework isn't static, and right now it's going through one of its most significant structural shifts yet. From July 2026, the Department of Internal Affairs (DIA) becomes the sole AML/CFT supervisor for all reporting entities in New Zealand, consolidating oversight previously shared across multiple regulators. This kind of regulatory change is exactly why your choice of platform matters: a system that's compliant today needs to still be compliant as the supervisory landscape settles and new guidance follows. A platform that's compliant today needs to still be compliant in 12 months when the rules shift.

Look for a vendor that doesn't just meet the current requirements but actively tracks regulatory updates and builds them into the platform - so you're not scrambling every time the DIA releases new guidance.

Ask the vendor: How do you update the platform when regulations change, and how will I know when that affects my compliance obligations?

2. Customer due diligence is quick, seamless and easy to follow

Your CDD process is the first thing your customers experience - and the first place you can lose them.

Slow verification flows, clunky document uploads, repeated requests for the same information: all of these create friction that damages your customer relationships and increases drop-off. At the same time, your team needs a process they can follow without a manual open on the side.

The best platforms make CDD feel effortless: fast ID checks, clear workflows, and verification that completes in seconds rather than days - without cutting corners on the checks themselves.

Look for:

• Biometric face match with liveness detection (not just a selfie that gets rubber-stamped)
• Document verification across New Zealand and international IDs
• Dynamic, risk-based flows that don't put low-risk customers through unnecessary steps
• Pass rates in the high 90s - anything lower and customers are abandoning the process

Ask the vendor: Walk me through a customer onboarding from start to finish. How long does it take, and what does the customer actually see?

3. You manage all your AML activity in one place

AML compliance isn't a one-time event. Every client, every transaction, every risk assessment needs to be tracked, assigned and acted on - ideally without bouncing between systems, spreadsheets or inboxes.

The best platforms give you a single, clear view of all your AML activity across your entire client base: new cases, ongoing obligations, team responsibilities and risk ratings - all in one intuitive dashboard.

Look for:

• A centralised dashboard that shows all clients and activities at a glance
• The ability to create and search entries by client or by activity type
• Task assignment across your team and visibility across departments or locations
• Risk ratings and case management built in, not bolted on

Ask the vendor: Show me how you'd manage the full compliance journey for an existing client - from viewing their current status to assigning a follow-up task to a team member.

4. It monitors and flags risk - even after verification is done

AML risk doesn't freeze the moment a client’s identity is verified. Your AML obligations are ongoing, and things change - risk profiles shift, sanctions lists update, documents expire. Without proactive monitoring, you won't know until it's too late.

Your platform should be working in the background, automatically flagging anything that needs attention so your team can focus on running the business rather than manually checking in on every client.

Look for:

• Ongoing PEP and sanctions monitoring - not just a one-time initial check 
• Automatic alerts when documents fail, expire or fall outside acceptable risk thresholds
• Review alerts you can set and automate based on risk level
• A company-wide compliance view so nothing slips through the cracks

Ask the vendor: What happens automatically after a client is onboarded? Walk me through how your platform would flag a change in a client's sanctions status or trigger a review alert.

5. Client documentation is stored securely and easy to produce

Sooner or later, your supervisor (DIA) will ask to see your records. The difference between a smooth review and a panicked one comes down to whether your software has kept all client documentation in one place - complete, accurate and instantly accessible.

Every CDD document, every risk assessment, every decision - stored securely, attributed to the right team member, and retrievable in moments rather than days.

Look for:

• All CDD records, decisions, risk assessments and supporting documents stored in one centralised platform
• The ability to pull up a complete client file in seconds, not after days of digging through emails and shared drives
• Timestamps and user attribution on every action, so your records hold up under scrutiny
• Automatic document retention for the five-year minimum required under the AML/CFT Act - so nothing is accidentally deleted or lost

Ask the vendor: If the DIA asked to review a client file today, how quickly could you show me everything on that client - and where is it stored?

How APLYiD covers all five

Built for New Zealand reporting entities, our platform is designed to do all of the above without the duct tape.

Always regulation-ready 

We track the evolving requirements from the DIA, FMA and RBNZ and update the platform accordingly, so your compliance programme stays current without extra work on your end.

CDD that's fast and seamless 

Biometric face match with liveness detection, document verification across New Zealand and international IDs, and pass rates north of 94%, all within a clean, intuitive workflow your customers and team will actually appreciate.

All your AML, in one place 

APLYiD's dashboard gives you a complete view of every client and every activity - so you can assign tasks, manage risk ratings, search by client or case, and share data across your team without chasing anything down.

Ongoing monitoring, on autopilot 

Set risk levels, automate review alerts and let APLYiD flag anything that needs attention - including PEP and sanctions changes - so you stay on top of your ongoing obligations without having to manually check in on every client.

Audit on demand 

APLYiD keeps all client information and documentation stored and audit-ready within the platform. Your records are organised by client and case, and accessible at any time - meaning when a regulator asks, you're not scrambling to compile anything.