AMLR Framework: Integrated Compliance Architecture
Status of every RTS, Guideline and ITS under the EU AML package, mapped onto the compliance framework. Click a block for its instruments, summary, impact and source links.
AMLR applies
Framework
All instruments
| Type | Instrument | Articles | Status | Consultation closes | Expected | Affects | Source |
|---|---|---|---|---|---|---|---|
| ITS | ITS on the common template for reporting suspicious transactions to the FIU AMLA | Art. AMLR | In consultation | — | 10 Jul 2026 | AMLA | |
| GL | Guidelines on the business-wide risk assessment (SIRA) AMLA | Art. AMLR | In consultation | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on ongoing monitoring and transaction monitoring AMLA | Art. AMLR | In consultation | — | 10 Jul 2027 | +1 | AMLA |
| NL | Implementatiewet AML-pakket (Dutch implementation act for AMLD6) MinFin | AMLD6 (whole) | In consultation | — | 10 Jul 2027 | MinFin | |
| RTS | RTS on customer due diligence (CDD) AMLA | Art. (1) AMLR | Consultation closed, being finalised | 6 Jun 2025 closed | 10 Jul 2026 | +7 | AMLA |
| RTS | RTS on business-wide and customer ML/TF risk assessment (risk factors & weighting) AMLA | Art. , (1), AMLR | Consultation closed, being finalised | 6 Jun 2025 closed | 10 Jul 2026 | AMLA | |
| RTS | RTS on the selection of obliged entities for direct AMLA supervision AMLA | Art. AMLAR | Consultation closed, being finalised | 6 Jun 2025 closed | 1 Jan 2026 | AMLA | |
| RTS | RTS on pecuniary sanctions, administrative measures and periodic penalty payments AMLA | Art. (10) AMLD6 | Consultation closed, being finalised | 6 Jun 2025 closed | 10 Jul 2026 | AMLA | |
| GL | Guidelines on internal policies, procedures and controls (incl. compliance function) AMLA | Art. , , , AMLR | Final, unpublished | — | 10 Jul 2027 | +1 | AMLA |
| GL | Guidelines on group-wide policies and third-country branches AMLA | Art. , AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on outsourcing of AML/CFT tasks AMLA | Art. AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on reliance on third parties for CDD AMLA | Art. – AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on information to be obtained from third parties AMLA | Art. , AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on ML/TF risk factors (revision of EBA/GL/2021/02) AMLA | Art. , – AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on customer risk classification and review frequency AMLA | Art. , – AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on politically exposed persons (PEPs) AMLA | Art. – AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on high-risk third countries and countermeasures AMLA | Art. –, – AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on EDD for cross-border correspondent relationships and crypto-asset service providers AMLA | Art. – AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on EDD for high-net-worth individuals and large private wealth AMLA | Art. (4), AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| GL | Guidelines on the identification and reporting of suspicious transactions AMLA | Art. – AMLR | Final, unpublished | — | 10 Jul 2027 | AMLA | |
| L1 | Anti-Money Laundering Regulation (AMLR) EU | Entire text | Published | — | 10 Jul 2027 | EU | |
| L1 | Sixth Anti-Money Laundering Directive (AMLD6) EU | Entire text | Published | — | 10 Jul 2027 | EU | |
| L1 | AMLA Regulation (AMLAR) EU | Entire text | Published | — | — | EU | |
| NL | DNB Leidraad Wwft en Sanctiewet (current guidance) DNB | Wwft, Sw 1977 | Published | — | — | +1 | DNB |
| NL | AFM Wwft guidance for investment firms, fund managers and CASPs AFM | Wwft | Published | — | — | AFM | |
| NL | FIU-Netherlands reporting guidance and goAML specifications FIU-NL | Wwft art. ; AMLR Art. | Published | — | — | FIU-NL | |
| NL | Dutch list of prominent public functions (Ministry of Finance) MinFin | AMLR Art. | Published | — | — | MinFin |
Developments & milestones
Upcoming
- 10 Jul 2027 in 303 daysAMLR applies / AMLD6 transposition deadlineAll AMLR obligations apply directly. AMLA Guidelines take effect at the same time.AMLR — Regulation (EU) 2024/1624 (EUR-Lex)
- 1 Jan 2028 in 478 daysAMLA starts direct supervisionFirst selection of around 40 institutions (selection round 2027) comes under direct AMLA supervision.AMLA — Authority for Anti-Money Laundering
- 10 Jul 2029 in 1034 daysAMLR obligations for football clubs and agentsLater application date for the newly added sectors.AMLR — Regulation (EU) 2024/1624 (EUR-Lex)
Completed
- 10 Jul 2026Deadline for the first tranche of RTS/ITS to the CommissionAMLA must submit the key RTS (incl. CDD, risk assessment) and ITS to the European Commission.AMLR — Regulation (EU) 2024/1624 (EUR-Lex)
- 1 Jul 2025AMLA operational in FrankfurtAMLA starts with its own staff; transfer of EBA AML/CFT powers at the end of 2025.AMLA — Authority for Anti-Money Laundering
- 6 Mar 2025EBA consults on four RTS under the AML packageRTS CDD, RTS risk assessment, RTS AMLA selection and RTS sanctions. Consultation closed 6 June 2025.EBA press release
- 19 Jun 2024AML package published in the Official JournalAMLR, AMLD6 and AMLAR published; entered into force 9 July 2024.AMLR — Regulation (EU) 2024/1624 (EUR-Lex)
From regulatory status to your own AMLR readiness
The dashboard above is free and needs no account. A workspace adds everything an organisation needs to turn the AML package into a plan: an AI impact assessment, country-specific points, a readiness tracker with heat map, an AI consultant that knows your organisation, consultations, alerts and a board report.
Public dashboard
- Status of every RTS, Guideline and ITS
One screen with every Level-2 and Level-3 instrument under the AMLR, AMLD6 and AMLAR: in consultation, closed, final or published, with consultation deadlines, expected dates, a summary, the impact and links to the EBA, AMLA and EUR-Lex source.
- Mapped onto a compliance framework
Instruments are placed on the framework blocks they affect (business-wide risk assessment, governance, customer due diligence, monitoring, reporting, data and systems), so you see at a glance where the regulatory pressure sits.
- Filter by type of obliged entity
Banks, payment and e-money institutions, crypto-asset service providers, insurers, investment firms, trust offices, accountants, lawyers, notaries, real-estate agents, traders in goods and football clubs each see only the instruments that apply to them, with their own application date.
- Article browser and "what changes" notes
Every article reference links to the text on EUR-Lex, and every framework block explains what changes compared with the current national law (for the Netherlands: the Wwft).
Workspace for your organisation
- Daily source check
EBA, AMLA, EUR-Lex, DNB, AFM, FIU-Netherlands and the Dutch ministry pages are fetched every day; new AML-related publications are listed in the workspace and can be sent by e-mail, Slack or Teams.
- Company profile with AI impact assessment
Type the name of your organisation; the AI looks it up, asks you to confirm, fills in the profile and produces an AMLR impact assessment: priority blocks, blocks that do not apply, matching documents and country-specific points.
- Readiness tracker and heat map
Per framework block a status, owner, target date and notes; the front page then shows your own readiness as a heat map over the framework. Analysis, roadmap and a print-ready board report come out of the same data.
- Country-specific points for every EU country
Editorial points for the Netherlands, Belgium, Germany, Luxembourg, France, Ireland, Spain and Italy, and AI-researched points for any other EU/EEA country your organisation operates in, with a country filter in the workspace.
- AI consultant that knows your organisation
Ask questions about the AMLR, the RTS and guidelines or your own readiness; the answers use your profile, readiness and selected points, and follow-up actions go straight onto your task list.
- Team workspace with consultations, tasks and audit log
Invite colleagues into the same organisation, track consultation responses and internal deadlines, keep personal task lists, export CSVs and see every change in the audit log.
- Alerts when a source changes
Pick the framework blocks you follow and get an e-mail, Slack or Teams message when the daily check finds a new consultation, final draft or publication.
- Personal task list
Follow-ups from consultant answers and assessment priorities land on your own list with due dates, next to tasks you add yourself.
- Board report and exports
A print-ready readiness report for the board and CSV exports of readiness, instruments, consultations and the audit log.
- Encrypted and protected
Everything your organisation enters is encrypted field by field before it is stored; two-factor authentication with an authenticator app, optionally required for the whole organisation.
How it works
- 1Follow the status
Use the public dashboard: every RTS, Guideline and ITS with its status, deadlines and sources, filtered for your type of organisation.
- 2Create a workspace
Choose how you want to use the tool (stay informed, analyse the impact, or monitor the programme) and invite colleagues.
- 3Describe your organisation
Type the name; the AI looks it up, you confirm, and it fills the profile and produces the AMLR impact assessment with matching documents and country points.
- 4Track and report
Record readiness per framework block, see it as a heat map, ask the consultant, plan consultations and milestones, and print the board report.
Three ways to use it
You choose when you create the workspace; an admin can change it later.
Stay informed
For anyone who needs to know where every RTS, Guideline and ITS stands, without tracking their own organisation.
- Dashboard with regulatory status, consultations and milestones
- Daily source check with what changed
- Alerts by e-mail, Slack or Teams
- Colleagues in the same organisation
Analyse the impact
For compliance and legal teams that want to know what the AMLR means for their organisation and ask questions about it.
- Company profile with AI impact assessment and document matching
- Country-specific points for the countries you operate in
- Ask the consultant, with follow-ups on your task list
- Everything in Stay informed
Monitor the programme
For programme owners who run the AMLR implementation and report on it.
- Readiness tracker with heat map, analysis and board report
- Consultation responses, roadmap and project milestones
- Audit log and CSV exports
- Everything in Analyse the impact
- Field-level encryption of everything you enter
- Two-factor authentication with an authenticator app
- One workspace per organisation, data separated per organisation
- Sources checked every day, statuses reviewed by hand
Beyond 10 July 2027
478 days until AMLA direct supervision (1 Jan 2028)The application date is the start of supervision, not the end of the work. AMLA keeps issuing and revising Guidelines and technical standards, direct supervision starts in 2028, and the AMLR turns compliance into a standing set of recurring obligations.
- Now
Prepare
Gap analysis against the AMLR text, redesign of onboarding, monitoring and reporting, and responses to AMLA consultations while the RTS, ITS and Guidelines are still being finalised.
- 10 Jul 2027
AMLR applies
The AMLR obligations apply directly. National supervisors (in the Netherlands DNB, AFM and BFT) supervise under the AMLD6 implementation act. First supervisory reviews test the new customer due diligence, beneficial-ownership and reporting processes.
- 2028
AMLA direct supervision
AMLA directly supervises the first group of around 40 cross-border financial institutions selected in 2027, through joint supervisory teams with the national supervisors. AMLA can also take over supervision of other entities in specific cases and coordinates the supervisory colleges.
- 10 Jul 2029
Football sector
Professional football clubs and agents become obliged entities. Institutions serving them adjust their risk assessment and due diligence.
- Ongoing
Maintain
AMLA keeps issuing and revising Guidelines, Q&As and technical standards; the Commission updates the high-risk third-country list and runs the supranational risk assessment. Compliance shifts from a project to a standing register of obligations, reviews and findings.
Recurring obligations after go-live
| Obligation | What it involves | Cadence | Framework blocks |
|---|---|---|---|
| Business-wide risk assessment (SIRA) | Review and update the business-wide risk assessment and the resulting policies; approve at management-body level. | At least yearly, and after material change | Business Wide Risk Assessment / SIRARisk AppetitePolicies & procedures |
| Periodic customer reviews | Refresh due diligence per risk class within the maximum review periods set in the RTS and Guidelines. | Per risk class (high risk yearly) | Periodic reviewClient Risk Assessment resulting in new/updated/confirmed AML/CFT risk classification |
| Compliance reporting to the management body | The compliance officer reports on the effectiveness of internal policies, findings and remediation; the compliance manager owns follow-up. | At least yearly | Compliance functionGovernanceManagement information & reporting |
| Suspicious transaction reporting | Report suspicions to the FIU in the ITS template, respond to FIU requests and suspension orders, and keep the tipping-off controls in place. | Continuous | FIU ReportingAlert handling |
| Training and awareness | Train staff on the AMLR obligations, typologies and internal procedures; keep records of who was trained on what. | Yearly and at onboarding | Employee Training & Awareness |
| Regulatory watch | Track new and revised AMLA Guidelines, Q&As, RTS/ITS revisions and Commission delegated acts, and map them to the framework blocks they change. | Continuous (this site checks sources daily) | Policies & proceduresRisk Management and Controls |
| Supervisory data and AMLA selection | Deliver the data used for AMLA's periodic selection of directly supervised entities and answer supervisory information requests. | Selection rounds every three years | Management information & reportingData & analytics |
| Record retention and data protection | Keep due-diligence and transaction records for five years after the end of the relationship, then delete them, within national data-protection practice. | Continuous | Record RetentionData & analytics |
Frequently asked questions
What is the AMLR?
The AMLR is Regulation (EU) 2024/1624, the EU Anti-Money Laundering Regulation. It is the "single rulebook" of the EU AML package: directly applicable customer due diligence, beneficial ownership, internal control and reporting obligations for obliged entities across the EU. It applies from 10 July 2027.
When does the AMLR apply?
The AMLR applies from 10 July 2027 (Article 90). Football clubs and agents follow from 10 July 2029. The same date, 10 July 2027, is the transposition deadline of the Sixth Anti-Money Laundering Directive (AMLD6, Directive (EU) 2024/1640).
What is the difference between an RTS, an ITS and a Guideline?
A Regulatory Technical Standard (RTS) is a binding delegated act that specifies how an AMLR article must be applied; AMLA drafts it and the European Commission adopts it. An Implementing Technical Standard (ITS) is a binding act that sets formats and templates, such as the template for reporting suspicious transactions. Guidelines are issued by AMLA on a comply-or-explain basis and set supervisory expectations without being directly binding law.
Who is AMLA?
AMLA is the Authority for Anti-Money Laundering and Countering the Financing of Terrorism, established by Regulation (EU) 2024/1620 and based in Frankfurt. It became operational in 2025, develops the RTS, ITS and Guidelines under the AML package, and will directly supervise a first group of around 40 cross-border financial institutions from 2028.
What does "RTS in consultation" mean?
A draft RTS has been published for public consultation. Obliged entities and industry bodies can respond until the consultation closes. After that the draft is finalised, submitted to the European Commission and adopted as a delegated regulation, then published in the Official Journal of the EU.
What changes for Dutch institutions compared with the Wwft?
Most Wwft obligations are replaced by the directly applicable AMLR; the Dutch implementation act keeps national elements such as supervision by DNB, AFM and BFT, FIU-Netherlands reporting and possibly lower cash limits. Key changes include suspicion-based reporting instead of "unusual transaction" indicators, an EU-wide beneficial ownership threshold, a board-level compliance manager and harmonised enhanced due diligence.
What happens after 10 July 2027?
From 10 July 2027 the AMLR obligations apply and national supervisors review compliance under the AMLD6 implementation act. From 2028 AMLA directly supervises a first group of around 40 cross-border financial institutions selected in 2027, with new selection rounds every three years. From 10 July 2029 football clubs and agents are covered. AMLA keeps issuing and revising Guidelines, Q&As and technical standards, so compliance becomes a standing cycle of risk assessments, periodic customer reviews, reporting and training rather than a one-off project.
What can I do with AMLR Monitor?
The public dashboard shows the status of every RTS, Guideline and ITS under the AMLR, filtered by type of obliged entity, mapped onto a compliance framework with article links and "what changes" notes. The workspace (free account per organisation) adds a company profile with an AI impact assessment, a readiness tracker shown as a heat map, country-specific points for every EU country, an AI consultant that knows your organisation, consultation tracking, daily source alerts, tasks, a team, exports and a board report.
How often is this dashboard updated?
Regulatory statuses are reviewed manually and dated on the page. In addition, an automated check fetches the EBA, AMLA, EUR-Lex and DNB source pages every day and lists any new AML-related publication for signed-in users in the workspace.