Does ClearAML maintain an immutable audit trail?

AUSTRAC requires all reporting entities to maintain records for 7 years under section 107 of the AML/CTF Rules. ClearAML's audit log is designed to meet — and exceed — this requirement with an immutable, append-only record that cannot be altered after the fact.

What "immutable" means in practice

An immutable audit trail means every event is recorded with a permanent timestamp that cannot be edited, overwritten, or deleted — not even by platform administrators. Once a compliance action is logged, that record exists permanently. This is the gold standard for regulatory audit trails because it provides tamper-evident evidence that actions occurred at the times recorded.

What ClearAML logs automatically

• Every CDD document upload and identity verification outcome
• Every screening check against PEP, sanctions, and watchlists — including false-positive resolutions with the reviewing user's name
• Every risk rating assigned or changed, with the reason and the user who made the change
• Every SMR draft created, including the suspicion date timestamp
• Every staff compliance quiz completion with score
• Every AML/CTF program version approved, with approver name and timestamp

Retrieving records for AUSTRAC inspection

When AUSTRAC requests records — whether as part of a routine review or an unannounced inspection — ClearAML allows you to filter, export, and produce audit records for any client or time period in seconds. There is no need to search through folders, email chains, or paper files.