2026 AML Compliance

2026 SRA AML Data Questionnaire:
The New Requirement for Audit Evidence

The SRA may require specific evidence of your independent AML audit.

Legal regulators now require firms to provide three pieces of evidence about their independent AML audit. Fewer than 10% of firms have completed one in the last two years.

The three pieces of evidence required
01
Date of audit
The exact date your most recent independent AML audit was completed.
02
Auditor name
The name of the independent auditor or firm who conducted the review.
03
Audit scope
A summary of what the audit covered and how it tested your AML framework.
Why act now
Deadline risk
SRA portal opens in July
Audit demand spikes once questionnaires publish. Availability becomes extremely limited at short notice.
Legal obligation
Regulation 21 applies now
Most in-scope firms are already required to maintain an independent audit function — not just at questionnaire time.
Increased scrutiny
AI analytics in 2026
The SRA is deploying AI to cross-check declarations across firms. Inconsistencies will stand out.