Qoobiss says EU AMLR will force firms to prove controls work

Qoobiss says the EU’s Anti-Money Laundering Regulation, which takes full effect in July 2027, will move compliance from having controls to proving how those controls work. The company is positioning its OVERWATCH platform as a demonstrability tool for regulated firms facing stricter audit and supervision demands.

Why it matters: - The EU Anti-Money Laundering Regulation shifts the standard from compliance by policy to compliance by proof. - Obliged entities will need to demonstrate how decisions were reached, what data was available, and how controls operated at the time. - The change raises the bar for auditability across onboarding, monitoring, investigation and reporting.

What happened: - Qoobiss said its OVERWATCH platform is designed for the AMLR environment and the new demonstrability standard. - The AMLR entered into force on 9 July 2024 and will apply in full from 10 July 2027. - The regulation applies directly across all 27 EU member states, replacing the national-by-national transposition model used under earlier directives such as AMLD5 and AMLD6. - The EU Anti-Money Laundering Authority, headquartered in Frankfurt, begins direct supervision of selected high-risk cross-border entities from 2028.

The details: - The AMLR requires internal controls to be a written, accountable framework approved by the management body and backed by a documented business-wide risk assessment. - Article 26 reframes ongoing monitoring around the full business relationship, including all transactions across the customer lifecycle. - Article 77 harmonises record retention across the EU and turns it into a time-bound, purpose-limited and supervisor-testable obligation. - Qoobiss said those rules mean supervisors will expect to reconstruct the evidence behind each decision. - The company also said the relevant data for a single AML analysis is often spread across onboarding systems, KYC records, screening tools, transactional platforms, files, emails and ad-hoc tools. - Qoobiss OVERWATCH unifies five compliance layers into one platform: Monitoring, Analysis, Investigation, Oversight and Administration. - Monitoring consolidates transaction monitoring, sanctions/PEP/adverse-media screening and identity-verification sessions into one intake channel. - Analysis includes Entity Intelligence and a Relationship Explorer for graph-based visualisation of networks and linkages. - Investigation includes Case Management and an Audit Trail that logs analyst actions. - Oversight includes aggregated KPIs, trend analytics and reports and exports for audits, regulators and internal stakeholders. - Administration includes Policy Manager, role-based access and configurable alert thresholds. - Alexandru Bora, Qoobiss, said the key differentiator will be the ability to prove at any moment how controls work and how decisions were reached.

Between the lines: - The release frames fragmentation as a compliance risk in itself, not just an efficiency problem. - That matters because AML teams often work across disconnected systems, which makes later reconstruction harder. - The AMLR appears to push firms away from treating identification, screening, risk classification, monitoring and investigation as separate stages. - Qoobiss is arguing that auditability is becoming an operational asset as well as a regulatory requirement. - The company says faster reconstruction of decisions can reduce investigation time, improve consistency and make it easier to respond to authorities.

What's next: - Firms subject to the AMLR have about a year until full application in July 2027. - Selected high-risk cross-border entities will then face direct supervision by AMLA from 2028. - The market is likely to prioritize systems that can connect alerts, evidence and decisions across the full AML lifecycle. - Qoobiss said organisations that build continuous monitoring and end-to-end visibility now will be better prepared for the 2027 deadline.

The bottom line: - Under the AMLR, compliance teams will have to show their work, not just claim they did it.