The right starting point
Eligible UAE designated non-financial businesses and professions (DNFBPs) seeking a broader review of an existing AML framework.
Growbox Auditing / AML SUPPORT
AML compliance support for UAE DNFBPs
AML support is scoped around the policies and records a DNFBP uses to identify, assess and respond to financial-crime risk. We review the documented framework and explain gaps that the business should address.
THE PURPOSE
What this engagement is for.
For eligible DNFBPs seeking a review of their existing AML framework, client due diligence files, screening and escalation procedures.
AML support is a distinct engagement and is not presented as a companion to a statutory audit for the same entity. Independence is assessed before acceptance. Regulatory acceptance is never guaranteed.
WITHIN SCOPE
What we can review and deliver
- Business risk-assessment and policy review
- Sample CDD and beneficial-ownership file checks
- Screening, training and escalation-control review
- Documented observations and an action plan
A CLEARER BRIEF
Know what this work is for.
We agree the purpose and boundaries before requesting detailed records.
What we need to understand
Do the risk assessment, customer due diligence, screening, escalation and training records work together in practice?
What you can expect
A scoped review of selected policies and control records, with documented observations and an action list. This is not a regulator’s approval or a statutory audit.
Your next step
Tell us the licensed activity and the part of the AML programme you want reviewed. AML work is considered separately from statutory audit, including independence checks.
Discuss this serviceHOW THE WORK MOVES
A clear sequence, from first question to next step.
The exact work depends on the agreed engagement. These stages show how the conversation and review are structured.
Risk
Review the business-wide risk assessment and its rationale.
CDD
Check selected client-identification and beneficial-ownership files.
Screening
Examine how relevant checks and results are documented.
Escalation
Trace how concerns are considered and recorded.
Actions
Prioritise improvements within the agreed engagement scope.
THE PRACTICAL QUESTIONS
What we look at, and why.
A DNFBP's AML framework is more than an identity document on file. The review considers how the business identifies risk, applies customer due diligence and records decisions when a concern arises.
Is the risk assessment usable?
Consider whether customer types, services and geographic exposure are reflected in the documented business risk assessment and related procedures.
Do sample files explain the customer?
Selected files may be checked for identification, beneficial ownership, risk rating and the reason for the measures applied.
What happens after a concern?
Examine how screening results, escalations, staff training and record keeping are documented within the agreed scope.
BEFORE WE BEGIN
The records that bring the question into focus.
We agree a limited, secure sample after confirming the entity's DNFBP status and the engagement's independence position. Do not send client identity documents through the website form.
- Business-wide AML risk assessment and policy set
- Customer acceptance and CDD procedures
- A secure sample of client files and screening records
- Training, escalation and compliance-monitoring records
OUR APPROACH
Clarity before the work begins.
We agree what is being reviewed, what records are needed and how findings will be discussed. The final scope is confirmed after an initial conversation and acceptance checks.
- 01
Confirm entity type and engagement independence
- 02
Collect policies, risk assessment and sample records
- 03
Review documented controls and discuss gaps
- 04
Provide an action list within the agreed scope
COMMON QUESTIONS
Useful answers before we speak.
Requirements and deliverables depend on the entity and the engagement agreed. These answers are a starting point.
Further reading: UAE Ministry of Economy & Tourism: 2026 DNFBP guidelines
Is KYC the whole AML programme?
No. Identifying and understanding a customer is one component. A documented risk assessment, monitoring, escalation, training and record keeping may also be relevant to the entity's obligations.
Does every business qualify as a DNFBP?
No. Classification depends on the licensed activity and applicable rules. We clarify the entity type and scope before proposing a review.
Can this be combined with a statutory audit?
No combined service is offered. AML support and statutory audit have different purposes, and independence is assessed before any engagement is accepted.
A CONVERSATION IS THE FIRST STEP
Discuss your needsTell us what you need reviewed.
Share the entity, period and purpose. We will discuss a suitable scope and next steps.