AML compliance software for the UAE's reporting institutions.
Sanctions and PEP screening, transaction monitoring, customer risk rating, case management and reporting to the UAE Financial Intelligence Unit through goAML, in one analyst workspace for financial institutions, DNFBPs and virtual asset service providers under the UAE's 2025 anti-money laundering law.
Built for Federal Decree-Law No. 10 of 2025 and the Financial Intelligence Unit.
Federal Decree by Law No. (10) of 2025, its executive regulations in Cabinet Resolution No. (134) of 2025, and supervisors' guidance set out what a reporting entity has to do. Each duty maps to a module, so the evidence sits where an examiner will look for it.
Identify customers and rate their risk
Six-factor customer risk rating across country, industry, product, channel, behaviour and PEP/sanctions exposure, with four-eyes overrides, plus a beneficial-owner graph for legal-entity customers.
Apply enhanced due diligence to PEPs and higher-risk customers
An EDD workflow inside case management, with periodic reviews scheduled automatically by risk band so a high-risk file does not go stale.
Screen customers against sanctions lists and PEP data
Multi-script, locale-aware matching against lists synced from providers such as Dow Jones and World-Check, plus manual upload for lists you maintain yourself, with versioned lists and freshness dashboards.
Monitor transactions for suspicious activity
A rule engine running in batch and streaming, with typology-aligned starter rules, back-testing and versioned promotion, fed by REST, SFTP, Kafka, CDC or ISO 20022 connectors.
Report suspicious and cash transactions to the FIU
A draft, review, approve and submit lifecycle with acknowledgement handling. The goAML XML is generated and validated by the Creodata goAML Reporting Platform, with a manual download if the portal is down.
Keep records and show supervisors the evidence
An append-only audit log behind every decision, evidence packs for inspections, a read-only regulator portal, and an obligation registry that turns new guidance and amendments into tracked tasks.
This maps software capability to obligations; it is not legal advice. For registration and filing mechanics, see the UAE goAML reporting guide.
For the UAE's reporting institutions, whichever regulator supervises them.
Each sector answers to the authority that supervises or licenses it; the Ministry of Economy & Tourism and the Ministry of Justice supervise designated non-financial businesses and professions.
Supervised by the authority that licenses them, such as the Central Bank of the UAE or the Securities and Commodities Authority, or in the financial free zones the Dubai Financial Services Authority and Abu Dhabi Global Market.
Must apply customer due diligence to occasional transactions of AED 3,500 or more, and report suspicions to the FIU like any other reporting entity.
DNFBPs for cash transactions of AED 55,000 or more, which they report to the FIU on goAML as a DPMSR; supervised by the Ministry of Economy & Tourism.
Report qualifying freehold sales on goAML as a REAR, and register on goAML through the Ministry of Economy & Tourism like other DNFBPs.
Frequently asked questions.
Does the software report to the FIU?
Yes, through goAML. Suspicious and threshold transaction reports move through a draft, review, approve and submit lifecycle in the AML software, with retry, reconciliation and acknowledgement handling. The Creodata goAML Reporting Platform then generates and validates the goAML file for the FIU's portal, and a manual download is available if the portal is down.
When must a UAE reporting entity file a suspicious transaction report?
Immediately and without delay once it suspects, or has reasonable grounds to suspect, that a transaction or funds are linked to the crime, whatever the amount and including attempted transactions, through the FIU's electronic system (Article 18 of Federal Decree by Law No. 10 of 2025 and of Cabinet Resolution No. 134 of 2025). Lawyers, notaries, other legal professionals and independent auditors are exempt for information covered by professional privilege.
Which goAML reports do DNFBPs file besides STRs?
Dealers in precious metals and stones record cash transactions of AED 55,000 or more in goAML as a Dealers in Precious Metals and Stones Report (DPMSR), and real estate brokers and agents file a Real Estate Activity Report (REAR) for freehold sales paid with AED 55,000 or more in cash, or with virtual assets, under Ministry of Economy circulars 08/AML/2021 and 05/2022. DNFBPs must first register on goAML. Creodata's goAML Reporting Platform can be configured to support both report types.
Can the software be hosted in the UAE?
Microsoft Azure has regions in the UAE (UAE North in Dubai and UAE Central in Abu Dhabi), and the software also runs on-premises on your own Kubernetes cluster with the same features as the Azure edition. Ask us which deployment fits your data-residency requirements.
How much does AML software cost in the UAE?
There is no public price list. Each capability is licensed separately and grouped into Starter, Growth and Enterprise tiers, so a quote depends on the modules you switch on and whether you deploy on Azure or on-premises. A demo is the quickest route to a quote scoped to your institution.
Can a smaller institution start small?
Yes. The Starter tier covers screening, customer risk rating and case basics in the cloud. Growth adds transaction monitoring, STR/CTR reporting and ingestion connectors, which a deposit-taking institution will need for its monitoring and reporting duties. Modules switch on per tenant, so moving up a tier adds capability without starting again.
How long does implementation take?
It depends on how many modules you start with and how your data arrives. Screening and risk rating need customer data; transaction monitoring also needs transaction feeds, which connect over REST, SFTP, Kafka, change data capture or ISO 20022 with replay and a dead-letter queue, so a failed load is visible rather than silent. After scoping, we propose a phased path to your first production go-live.
See the AML software run on a UAE reporting profile.
Screening, monitoring, cases and FIU reporting on a realistic alert queue, in a live demo.