AML compliance software for Zambia's reporting institutions.
Sanctions and PEP screening, transaction monitoring, customer risk rating, case management and reporting to the Financial Intelligence Centre through goAML, in one analyst workspace for reporting entities under Zambia's Financial Intelligence Centre Act.
Built for the Financial Intelligence Centre Act and the Financial Intelligence Centre.
Zambia's Financial Intelligence Centre Act, 2010, its 2022 regulations and the Prohibition and Prevention of Money Laundering Act, 2001 set out what a reporting entity has to do. Each duty maps to a module, so the evidence sits where an examiner will look for it.
Identify customers and rate their risk
Six-factor customer risk rating across country, industry, product, channel, behaviour and PEP/sanctions exposure, with four-eyes overrides, plus a beneficial-owner graph for legal-entity customers.
Apply enhanced due diligence to PEPs and higher-risk customers
An EDD workflow inside case management, with periodic reviews scheduled automatically by risk band so a high-risk file does not go stale.
Screen customers against sanctions lists and PEP data
Multi-script, locale-aware matching against lists synced from providers such as Dow Jones and World-Check, plus manual upload for lists you maintain yourself, with versioned lists and freshness dashboards.
Monitor transactions for suspicious activity
A rule engine running in batch and streaming, with typology-aligned starter rules, back-testing and versioned promotion, fed by REST, SFTP, Kafka, CDC or ISO 20022 connectors.
Report suspicious and cash transactions to the FIC
A draft, review, approve and submit lifecycle with acknowledgement handling. The goAML XML is generated and validated by the Creodata goAML Reporting Platform, with a manual download if the portal is down.
Keep records and show supervisors the evidence
An append-only audit log behind every decision, evidence packs for inspections, a read-only regulator portal, and an obligation registry that turns new guidance and amendments into tracked tasks.
This maps software capability to obligations; it is not legal advice. Thresholds and deadlines change, so confirm the current position with the Financial Intelligence Centre.
For Zambia's reporting institutions, whichever regulator supervises them.
The Financial Intelligence Centre Act, as amended in 2020, names the supervisory authorities, and the FIC is one of them.
The Bank of Zambia.
The Pensions and Insurance Authority and the Securities and Exchange Commission.
The licensing committee under the Tourism and Hospitality Act, the Law Association of Zambia, the Zambia Institute of Chartered Accountants, the Registrar of Estate Agents and the Chief Registrar of Lands.
Since 2020, co-operative societies, motor vehicle dealers, property developers, safe-custody providers and travel agents are accountable institutions with due diligence, cash reporting and record-keeping duties.
Frequently asked questions.
Does the software report to the FIC?
Yes, through goAML. Suspicious and threshold transaction reports move through a draft, review, approve and submit lifecycle in the AML software, with retry, reconciliation and acknowledgement handling. The Creodata goAML Reporting Platform then generates and validates the goAML file for the FIC's portal, and a manual download is available if the portal is down.
How quickly must a Zambian reporting entity file a suspicious transaction report?
Not later than three working days after forming the suspicion, under section 29 of the Financial Intelligence Centre Act, 2010. The duty covers attempted transactions and suspicions linked to terrorism or proliferation financing as well as money laundering.
What is Zambia's currency transaction reporting threshold?
Reporting entities report any currency transaction equal to or above the Kwacha equivalent of USD 10,000, in Kwacha or foreign currency, including several transactions that appear to be linked, within three working days (section 30 of the Financial Intelligence Centre Act and Statutory Instrument No. 53 of 2022). Records must be kept for at least 10 years.
Can we run the software on-premises in Zambia?
Yes. The on-premises edition runs on your own Kubernetes cluster with Postgres 16, RabbitMQ, MinIO, OpenSearch and Keycloak, and has the same features as the Microsoft Azure edition, so an institution that must keep data in its own data centre is not running a lesser product.
See the AML software run on a Zambia reporting profile.
Screening, monitoring, cases and FIC reporting on a realistic alert queue, in a live demo.