AMLCore360AML compliance platform for CySEC- and HCMC-supervised firms
One Platform.
Total AML Compliance.
KYC, risk assessment, screening, transaction and payment monitoring, investigations, FIU reporting and the regulatory returns your supervisor expects — in one audited system, in English and Greek, hosted for you or on your own servers.
- 750k+
- sanctions & PEP entries, refreshed daily
- < 50 ms
- per name screened, any script
- 3
- regulatory returns generated into official templates
- 100%
- of actions hash-chained in the audit trail
Every module a compliance function needs
Built as one system, so a screening hit becomes an alert, an alert becomes a case, a case becomes a filed report, and every step is evidenced for the regulator.
Customer KYC & KYB
Onboard individuals and legal entities, verify identity documents, record UBOs and directors, and run an onboarding checklist with senior sign-off for high-risk relationships.
Customer Risk Assessment
A configurable risk-based model — geography, customer type, PEP status, industry, channel, products, screening — with mandatory floors, full factor breakdown, history and audited overrides.
PEP & Sanctions Screening
Fuzzy, transliteration-aware name matching across EU, UN, OFAC, UK and PEP lists, in Latin, Greek and Cyrillic script, with false-positive memory and analyst review.
Transaction Monitoring
Tunable scenarios — structuring, large cash, high-risk jurisdictions, rapid movement, profile deviation, round amounts, virtual assets — evaluated on every transaction in a single base currency.
Payment Screening
Every counterparty is screened against all active lists at the moment a payment is recorded; sanctions hits raise critical alerts linked to the transaction.
Case Investigations
Escalate alerts into case files with an investigation log, assignment, priority and outcome; draft a suspicious transaction report from the case in one click.
SAR / STR Reporting
Draft, four-eyes approval and filing with the FIU — goAML XML for MOKAS, the Hellenic FIU's investment-firm template and data file for Greece.
Ongoing Due Diligence
Periodic reviews scheduled from the risk band, trigger-event reviews, adverse-media re-checks and document expiry tracking, with every review re-screening and re-rating the customer.
Regulatory Reporting
CySEC Form MPS and the AMLCO annual report, the HCMC Article 10 annual questionnaire — generated into the regulators' own Excel templates from your live data.
Compliance Dashboards
Alert queues, case load, screening backlog, reports awaiting the MLRO, overdue reviews and risk distribution — the MLRO's morning view.
Built for Cyprus and Greece first
The regulatory returns are generated from your live data into the authorities' own templates, with figures computed, comparatives pre-filled and deadlines tracked.
CySEC — Cyprus
- Form MPS — Monthly Prevention Statement in the official Excel, ready for the TRS (15 days after month-end).
- AMLCO Annual Report — all ten sections of Directive §10(4) with the year's figures and prior-year comparatives.
- STR to MOKAS — goAML-style XML export and printable report.
HCMC — Greece
- Annual Report, Art. 10 — the official questionnaire (items 1.1–9.30) filled from your data, with the AMLCO declaration letter.
- STR to the Hellenic FIU — report in the investment-firm template layout plus the ΦΥΣΙΚΑ/ΝΟΜΙΚΑ data file.
- Greek user interface — the whole staff workspace in Ελληνικά.
Screening that keeps itself current
Official lists are fetched from the publishers every night; delistings deactivate entries and changes re-screen your book automatically. Matching understands transliteration — Kostas and Costas, Yevgeny and Evgeniy, Σβέρμπανκ and Sberbank — and remembers every dismissed false positive.
Customers, beneficial owners and payment counterparties are screened; FATF and EU jurisdiction lists drive enhanced due diligence automatically.
- EU Consolidated Sanctions
- UN Security Council
- OFAC SDN & Non-SDN
- UK Sanctions List (FCDO)
- PEPs incl. relatives & associates
- FATF black & grey lists
- EU high-risk third countries
- Adverse media checks
- Beneficial-ownership registers
Controls your auditor will ask about
Tamper-evident audit trail
Every action is hash-chained and verified daily; nothing can be altered or removed unnoticed.
Maker-checker
Risk overrides, rule changes, list edits and role changes need a second approver.
Two-factor & SSO
TOTP for every user, account lockout, 12-character password policy, OpenID Connect single sign-on.
Encrypted documents
AES-256-GCM at rest in your own S3-compatible bucket, integrity-checked on every download.
Retention & GDPR
Retention clocks from relationship exit, legal hold, and audited minimisation of personal data.
Customer book import
Bring an existing book across from CSV — customers, beneficial owners and accounts — validated, screened and rated on arrival.
Hosted for you, or on your own servers
AMLCore360 Cloud
A dedicated, isolated instance per firm — your own database, encryption keys and backups — at yourfirm.amlcore360.com. We run upgrades, list updates, monitoring and backups; you keep full data ownership and can export everything at any time.
On-premises
The same software on your infrastructure: a Docker Compose stack or a plain Linux server with PostgreSQL, installed in minutes, with the same automated list updates and scheduled jobs.
See it with your own data
Tell us a little about your firm and we'll set up a demo instance — with your regulator's returns and your language — usually within one working day.