How AML Simple meets every criterion on the REIQ AML toolkit technology provider checklist

REIQ published its AML Toolkit this week — practical guidance for Queensland real estate agents getting ready for 1 July. Inside it is a technology provider evaluation checklist — seven categories, four questions each, 28 criteria in total. Queensland agents are now using this checklist to shortlist AML compliance software.

We welcome these questions. So here is how AML Simple answers each one — including the ones where we have honest caveats. Trust is built by honesty, not spin.

If you have the REIQ checklist in hand and want to see the platform before you read further — start your free trial at /get-started. It takes around 15 minutes to build your first AML/CTF program. No card required.

---

Category 1: Who are we?

The REIQ checklist asks about your vendor's background, regulatory history, and industry experience.

AML Simple is a new company, built in 2026 specifically for AUSTRAC's Tranche 2 reforms. We will not pretend otherwise. We were founded to solve one problem: small Australian real estate agencies had no affordable, self-service AML compliance tool. Enterprise platforms required sales calls and minimum volumes. Consultants cost A$28,000. We built AML Simple so agencies could get compliant from a browser tab.

What we are not: a generic KYC tool repurposed for real estate, or an enterprise platform with a new landing page. Every feature is built for the real property transaction designated service under the AML/CTF Act 2006 (Cth) and the AUSTRAC Tranche 2 reforms effective 1 July 2026.

Regulatory history: Clean slate. No regulatory actions, no AUSTRAC sanctions, no legal issues.

Our constraint: We are 2026-built. We do not have ten years of case studies. What we have is deep focus on the specific regulatory moment Queensland agents are facing right now.

---

Category 2: Does it do what you need?

The REIQ checklist asks whether the platform covers the full scope of AUSTRAC obligations — not just one part of them.

This is where AML Simple is strongest.

Most tools on the market cover one or two obligations — usually identity verification, sometimes program generation. AML Simple covers the complete AUSTRAC compliance stack:

• AML/CTF Program Generator — builds your written program document, consistent with the structure in AUSTRAC's own Program Starter Kit. You answer the questions; the program reflects your agency.
• Customer Due Diligence (CDD) — guided CDD workflows for individuals, companies, and trusts. Send verification links to clients, collect and store documents, record the outcome.
• Sanctions and PEP screening — screen every client against the DFAT Consolidated List and Politically Exposed Persons data. Daily refresh (see Category 7).
• Suspicious Matter Report (SMR) drafting — AI-assisted SMR narrative drafting with structured fields. You review and finalise; the tool does not submit on your behalf.
• Threshold Transaction Reports (TTRs) — track and record cash transactions of A$10,000 or more.
• Staff training — built-in training module covering Tranche 2 obligations for new and existing staff.
• Ongoing monitoring — client risk review workflows and monitoring records.
• Annual Compliance Report wizard — ready for your first AUSTRAC report, due March 2027.

Scales from sole operator to multi-office agency. Our Agency tier is designed for practices with multiple offices, multiple staff, and higher transaction volumes.

Designed for non-experts. We built this for agency principals and property managers, not compliance professionals. Guided wizards, plain language, indicative completion times of around 15 minutes for the program.

For the full picture of what Tranche 2 requires and how each obligation maps to the platform, see our complete guide to AUSTRAC Tranche 2 for real estate agencies.

---

Category 3: Is your data safe?

The REIQ checklist asks about data location, security certifications, and your ability to leave.

All data is stored in Sydney, Australia. Our infrastructure runs on Supabase's ap-southeast-2 region. No client data leaves Australia. This is a non-negotiable architectural decision, not a marketing claim — it is built into where the database sits.

Security certification: Our infrastructure provider (Supabase) holds SOC 2 Type 2 certification — an independently audited security standard. We will be direct: we do not currently hold ISO 27001 ourselves. For a small agency evaluating tools, SOC 2 Type 2 at the infrastructure layer is a meaningful signal. We will pursue additional certifications as the business scales.

Row-level security. Your agency's data is isolated at the database layer. Your staff see your records; no other agency's data is visible.

Data export. You can export your complete record set at any time from your dashboard. AUSTRAC requires records to be kept for 7 years — we retain them for the required period, and you can always take a copy. If you leave, your records leave with you.

AUSTRAC requires 7-year record retention under the AML/CTF Act 2006. AML Simple stores records for the full required period.

---

Category 4: What support do you get?

The REIQ checklist asks about onboarding, ongoing support, and how feedback is handled.

Email support, Monday–Friday AEST. Agency tier clients receive priority support. We target weekday responses; we do not publish a guaranteed SLA — we are a self-service platform, not a managed service.

Staff training is built in. Your team does not need to attend an external training session — the training module lives inside the platform. Onboarding is self-service from day 1.

Honest caveat: We are a self-service tool, not an advisory firm. We do not have dedicated account managers assigned to individual agencies (Agency tier clients have priority access to the support team, which is the closest equivalent). We do not offer phone support.

If you need expert advice — a compliance consultant to review your program, advise on edge cases, or prepare for an AUSTRAC audit — that is outside the platform's scope. We are a workflow tool. Expert advice is a separate service. We will be building a marketplace for qualified AML professionals; in the meantime, independent AML consultants are available through REIQ's network and AUSTRAC's own guidance.

---

Category 5: What does it cost?

The REIQ checklist asks about fee structure, hidden costs, and lock-in.

Transparent, flat pricing. No surprises.

Flat monthly base fee. No per-client or per-transaction charges for core CDD workflows. Each paid plan includes a monthly allocation of PEP screening checks and eKYC identity verifications — see /pricing for included quantities. Overages above the included allocation are billed per check (PEP screens: A$1/check; eKYC identity verifications: A$5/check). Most agencies with normal transaction volumes will stay within included allocations. The base subscription covers unlimited clients and unlimited CDD record creation.

No setup fees. No onboarding fees. No training fees. Self-service from day 1.

No forced lock-in. Month-to-month billing on all plans. Annual billing is available and saves 2 months — but it is a choice, not a requirement.

See full pricing at /pricing.

For comparison: a compliance consultant typically costs A$28,000 for initial program setup. AML Simple Starter is A$948/year — less than the hourly rate of most compliance advisors, and it keeps working every day after you set it up.

---

Category 6: Will it work with your other tools?

The REIQ checklist asks about integrations with CRMs, REX, VaultRE, PropertyMe, and agency management software.

Honest caveat: no CRM integrations today.

AML Simple does not currently integrate with REX, VaultRE, PropertyMe, Console Cloud, or other real estate CRMs. We will be direct about this because it matters.

What this means in practice: You will run AML compliance workflows in AML Simple and your agency management in your CRM — separately. Most agencies manage this with a simple process: when a new client comes in, you open AML Simple and start a CDD check alongside your normal intake. It is an additional tab, not an embedded flow.

Why this is still workable: Your AML obligations are the agency's — not the software's. AUSTRAC does not require your AML platform to integrate with your CRM. It requires you to complete CDD, maintain records, and report correctly. AML Simple handles all of that from a browser, on any device.

Web-based, no IT required. Works in Chrome, Safari, Firefox, Edge. No software installation, no server setup, no IT support required.

CRM integrations are on our roadmap for H2 2026, starting with the most widely used Queensland agency platforms. We will announce these as they become available.

---

Category 7: Does it keep you compliant?

The REIQ checklist asks about regulatory updates, audit readiness, and how the platform responds to AUSTRAC guidance changes.

DFAT Consolidated List updated daily. Every sanctions screening check runs against the current list. You are not screening against a stale snapshot.

Full audit trail. Every CDD record, every screening result, every SMR, every TTR — timestamped, structured, and stored. If AUSTRAC audits your agency, your records are searchable and exportable from your dashboard.

Annual Compliance Report wizard. Ready for your first AUSTRAC report (due March 2027). Pulls data from your records through the year.

Tool not advice. This is the most important thing we can say in this section: AML Simple is a compliance workflow tool. We are not a compliance consultancy. We do not provide legal advice. We do not guarantee AUSTRAC acceptance of your program or any other output.

What we have done is build to the structure AUSTRAC recommends. Our program generator is consistent with AUSTRAC's Program Starter Kit — the same framework AUSTRAC provides for free, automated and customised to your agency's specific services, risk profile, and structure. We are not claiming AUSTRAC endorsement; we are saying our output structure aligns with their published guidance. Those are different things, and we are precise about the distinction.

Your compliance program is yours to own and defend. The wizard guides you through the decisions; you make them. That is what AUSTRAC expects of reporting entities.

---

The bottom line

REIQ says any vendor worth partnering with will welcome these questions. We agree. The checklist is well-constructed — it surfaces vendors who are vague on data location, bury fees in fine print, or cannot explain how they stay current with regulatory changes.

Here is where we stand against each category:

If you are a Queensland agent who just downloaded the REIQ toolkit and is evaluating providers, we built AML Simple for exactly this moment.

Start your AML program — free, no card required →

Around 15 minutes to complete your first AML/CTF program. No consultant. No contract. No setup fee.

---

AML Simple is a compliance workflow tool. Nothing in this post constitutes legal or regulatory advice. Your agency is responsible for its own AML/CTF program and compliance obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth). For advice on your specific situation, consult a qualified AML compliance professional.