Skip to content

Lawyers · Accountants · Real estate agents · Trust providers

Collect customer due diligence for Tranche 2, with every answer signed and every document on file.

Businesses regulated under Australia's AML/CTF reforms from 1 July 2026 collect KYC and beneficial ownership details on forms each customer signs, and take identity documents through a secure upload link.

DekkoCORE audit logs for one Hub: each user's views, downloads and uploads with the date, a period filter and a Download as CSV button
In DekkoCOREThe audit log keeps a record of every view and upload.
KYC forms
Each answer signed by the customer.
Beneficial ownership
Collected on the same form.
ID documents
Uploaded through a secure link.
Retention
Kept for the period you set.

Why Tranche 2 due diligence is new work

From 1 July 2026, many lawyers, accountants, real estate agents and trust providers must identify their customers and beneficial owners, and keep the records.

Today

  • ID documents emailed as attachments
  • Ownership details typed into spreadsheets
  • No proof of who answered the questions
  • Records scattered across inboxes

With DekkoCORE

  • ID documents uploaded through a secure link
  • KYC answers on a form
  • Each answer signed by the customer
  • Records kept together, with an audit log

How it works in DekkoCORE

One new customer, from onboarding to the retention period.

  1. Step 1

    Open the customer's folder

    Create a folder for each new customer.

    • Hub folders
  2. Step 2

    Send the KYC form

    Send a form for identity and beneficial ownership details. Each answer is signed by the customer.

    • Forms
  3. Step 3

    Collect ID documents

    Send a guest link for the customer to upload identity documents.

    • Guest link uploads
  4. Step 4

    Export for your records

    Export form answers as CSV for your compliance system.

    • CSV export
  5. Step 5

    Keep them for the retention period

    Set data expiration to match your retention period, such as seven years.

    • Data Expiration

Who gets what access

A typical customer. You can change or remove anyone's access at any time.

  • Compliance team

    Full permissions

    Runs due diligence and keeps the records.

  • Client-facing staff

    View only

    Check a customer's details.

  • Customer

    Form and guest link

    Answers the questions and uploads ID.

  • Everyone else

    Not shared

    Can't see the customer's records.

The bars show a permission level, from Listing only (one bar) to Full permissions (seven).

Questions

Does DekkoCORE make us AML/CTF compliant?

No software makes you compliant on its own. DekkoCORE gives you a secure way to collect and keep due diligence records.

Do customers need an account to answer the form?

Yes. Forms go to registered users, which is what lets each answer be signed by the customer.

How long are records kept?

Set data expiration to match your retention period. It applies across your whole tenancy, with a minimum of 30 days.

How secure is the ID upload link?

Anyone holding a guest link can use it, so send it only to the customer. Guest links last up to a month and can be renewed.

Can DekkoSecure read the form answers?

No. Form answers are encrypted, and DekkoSecure can't read them.

Getting ready for Tranche 2?

Tell us how you collect customer due diligence today. We'll show you the same process in DekkoCORE.