01
Firm-wide risk assessment
The firm-wide AML and financial-crime risk assessment, together with any proliferation-financing risk assessment where relevant to the firm's work.
Audit scope
What we review.
A focused, point-in-time Independent Regulation 21 AML Audit of the agreed firm-level evidence — designed to give senior management a clear, practical view of the arrangements in scope.
The standard £999 + VAT scope
A proportionate review of the firm's AML framework.
Subject to the agreed evidence, the standard audit considers the firm's framework, governance, policies, procedures, controls, templates, oversight arrangements and supporting organisational evidence. It is evidence-led and tailored to the firm's size, nature and risk context as apparent from the onboarding information and material provided.
Technology may assist the analysis, but it does not independently issue an audit opinion. A human professional reviewer evaluates the relevant evidence, challenges unsupported points, applies professional judgement, materiality and proportionality, and signs off the report.
This is an external, one-time and point-in-time review of agreed evidence. It is not the firm's ongoing internal audit function under regulation 21(1)(c) of the Money Laundering Regulations 2017.
Evidence-led review themes
The material we may examine.
These categories describe the types of firm-level evidence that may be relevant; they are not a promise of exhaustive testing. The agreed evidence request and scope remain controlling.
02
Policies, controls and procedures
The AML policies, controls and procedures that describe how the firm applies its approach in practice.
03
Governance and oversight
Governance arrangements, MLRO and MLCO oversight, escalation routes, management information and supporting reporting.
04
CDD and onboarding controls
The firm's documented client due diligence and onboarding controls, including relevant supporting guidance and templates.
05
Client and matter risk
The approach to assessing and recording client and matter risk, including the methodology and tools the firm uses.
06
Source of funds, wealth and EDD
Relevant guidance and controls for source of funds, source of wealth and enhanced due diligence.
07
Screening arrangements
Documented arrangements for PEPs, sanctions and other screening, as relevant to the firm's established process.
08
Training and records
Training material, training records and the way the firm records or evidences its AML training arrangements.
09
Supervision, QA and remediation
Supervision and quality-assurance arrangements, relevant anonymised QA findings, and prior remediation material where available.
10
Supporting tools and history
Relevant templates, checklists, previous independent audit material and prior remediation plans that help explain the firm's framework.
Practice context
Context helps keep the review proportionate.
During onboarding, we ask whether the firm undertakes residential conveyancing, commercial conveyancing, corporate work, probate and estate planning, tax work, or trust and company service provision. We also ask about client-account use and high-level financial-crime context.
This information helps the reviewer understand the firm's operating context and assess the agreed evidence proportionately. It does not produce a risk rating or an automated decision.
Standard-scope boundaries
What is not normally included.
Unless expressly agreed in a signed variation or bespoke engagement letter, the standard audit does not include:
- Comprehensive live-client-file testing or review of live client identity documents.
- Privileged material, unnecessary personal information or other confidential client material.
- Drafting, rewriting or implementing policies, procedures, controls or remediation plans.
- Monitoring implementation or ongoing compliance with recommendations.
- Legal advice, a legal compliance opinion, or representation before a regulator.
Submit Audit Evidence
Send only the firm-level evidence requested.
Please do not provide live client identity documents, unnecessary personal information, privileged material or other client-confidential information unless specifically requested. Use anonymisation where reasonably possible.
The current version-one method is to organise the requested material into one encrypted archive with a clear filename, then email it to luke@hsconsultants.info. Share the archive password separately through the agreed channel; do not include it in the same email.
The website does not receive or store substantive audit documents. HS Consultants will confirm receipt and may request clarification or additional evidence where needed.
Before you send
After onboarding, use the detailed evidence instructions and agreed evidence request to organise only the folders that apply to your firm. The submission stage is called Submit Audit Evidence so the method can evolve without changing the audit scope.
Go to onboarding and evidence instructionsReady to begin?
Independent AML assurance for £999 + VAT.
The standard audit is for UK law firms with up to 10 partners. For larger firms, please enquire for scope-led pricing.
Audit purchases are temporarily unavailable while we finalise VAT treatment at checkout. For a larger-firm or general enquiry, contact us.