AML Compliance

Anti-money laundering compliance is a regulatory requirement for accountancy practices. Sodium connects to your AML provider - Xama or Firmcheck - so you can manage identity verification and risk assessments directly from your client records — no switching between platforms.

Xama
Firmcheck

At a glance

  • Connect your AML provider once in Settings and the whole team can run checks
  • Link each client to an existing AML record, or create one pre-filled from Sodium
  • Bulk mapping screen for a fast start, with name-based match suggestions on Xama
  • AML link, risk level and latest status visible at a glance on every client record
  • Full risk assessment history - status, risk level, preparer and reviewer - on Xama
  • Identity verification built into the proposal acceptance flow for new clients on Xama; Firmcheck files the client at acceptance

Integrated with Your AML Provider

Sodium is securely integrated with Xama and Firmcheck. Configure your connection once in practice settings, and your entire team can run AML checks from within Sodium. The connection status is monitored so you always know it's active - just like every other integration Sodium connects to.

The two providers expose different things through their APIs, so a few capabilities are available with Xama only. Sodium shows what your provider supports and hides what it doesn't - see What each provider supports below.

Link Clients to AML Records

Each client record in Sodium can be linked to a corresponding AML account with your provider. You can either pick an existing client from your AML account, or create a new one directly from Sodium.

When creating a new AML client, Sodium pre-fills the details from your client record — name, type, company registration number, and contact information — so there's minimal duplication of effort. Individual, sole trader and company clients are supported.

With Xama, Sodium automatically matches AML clients based on the client name, so linking existing records is fast and accurate. Firmcheck's API has no name search, so you pick from the list instead.

Risk Assessments

Once a client is linked, you can view the full history of risk assessments without leaving Sodium. Each assessment shows:

  • Current status — In Progress, In Review, or Completed
  • Risk level — Low, Normal, or High
  • Who prepared the assessment and when
  • Who reviewed it and their notes
  • Completion date

For detailed review or to initiate a new assessment, a direct link takes you straight to the relevant record in your provider's platform.

Xama only. Firmcheck does not expose risk assessments through its API. For Firmcheck clients, Sodium shows the latest AML determination instead - status, risk level and next review date - with a link to the client in Firmcheck.

Bulk Mapping

When you first connect your AML provider, you'll need to link your Sodium clients to their corresponding AML records. You can do this individually from each client record, but for a faster start there's a bulk mapping screen.

From the AML section in Settings, click the Mappings button to see all your clients alongside their AML counterparts. On Xama, Sodium suggests matches based on client names - accept the suggestions with a single click, or choose a different match from the dropdown. On Firmcheck you choose the match from the dropdown for each client.

Part of Client Onboarding

AML doesn't have to be a separate task you remember to do later. You can build it straight into your proposal acceptance flow - once a client has accepted their proposal and signed their engagement letter (and optionally set up a Direct Debit), they complete identity verification with your AML provider as part of the same journey.

Enable it under Settings > Proposal settings, and every new client is verified by the time they're fully onboarded.

Identity verification at acceptance is Xama only. Firmcheck cannot be asked to start a check, so with Firmcheck connected, acceptance creates the client and their contacts in Firmcheck ready for your team to run the check there. The client sees no extra step.

Compliance at a Glance

Every client record shows AML compliance status at a glance — whether the client is linked, their current risk level, and the status of their most recent assessment or determination. Your team can immediately see which clients need attention.

Contact information flows between Sodium and your AML provider, so you can send existing client contacts to the AML platform or add new ones manually during setup. On Xama, each contact also carries its own verification status; Firmcheck reports status at client level only.

What Each Provider Supports

Both providers cover connecting, linking and creating AML clients, pushing contacts across, bulk mapping, and showing risk level and status on the client record. The differences come from what each provider exposes through its API:

  • Risk assessment history and starting a new assessment — Xama only. Firmcheck shows the latest determination summary.
  • Requesting identity verification, on the client record or at proposal acceptance — Xama only. Firmcheck files the client for your team to verify there.
  • Per-contact verification status — Xama only. Firmcheck holds status at client level.
  • Name search and automatic match suggestions when linking clients — Xama only.