Other Industries
Why Spreadsheets Are Not a Safe AML/CTF System Under Tranche 2
Many firms started preparing for Tranche 2 with spreadsheets. Here is why that creates risk, and what a more defensible approach looks like.
Spreadsheets are a reasonable starting point for thinking through an AML/CTF program. They are fast to build, flexible, and your staff already know how to use them. The problem is that they are a poor evidence system, and evidence is what AUSTRAC will ask for.
When a client file is split across an intake spreadsheet, email attachments, a shared drive folder, and a partner's notebook, it is difficult to show that checks were done in the right order, at the right time, by the right person. Static documents do not log who made changes or when. There is no version history tying a risk rating to a specific piece of evidence.
Under Tranche 2, designated service providers need to demonstrate that their AML/CTF program operates as documented. That means records of client verification, proof of risk decisions, training completion, and suspicious matter logs need to be organized and retrievable. A spreadsheet can store data, but it cannot consistently enforce process steps or capture the context behind decisions.
Structured compliance software handles the process layer that spreadsheets cannot. Records are created in order, evidence is attached at the right step, and risk decisions are logged against the client file. You do not need enterprise-level software to achieve this — you need something that fits how a small professional services firm actually works.
ClientCheck is purpose-built for Tranche 2 professional service firms. It replaces the patchwork of spreadsheets and shared folders with a single structured client record, while keeping the workflow simple enough that busy practitioners will actually use it.
Need a practical way to handle AML/CTF client checks, risk scoring, and evidence capture? ClientCheck helps Australian firms run compliant onboarding workflows aligned with AUSTRAC expectations. Start with a walkthrough and see how your team can go live fast.
Key Takeaways
- When client files are split across spreadsheets, emails, and shared drives, demonstrating consistent process to a regulator becomes very difficult.
- Static spreadsheets do not log who made changes, when, or what evidence supported a risk decision.
- Structured compliance software handles the process layer that spreadsheets cannot: ordered records, attached evidence, logged decisions.
- You do not need enterprise software — you need something purpose-built for how a small professional services firm actually operates.
Build a Defensible AML/CTF Program Before July 2026
See how ClientCheck helps your team run compliant workflows with less friction, better evidence quality, and stronger oversight.