Covered financial institutions and certain businesses that detect suspicious activity under the Bank Secrecy Act must file. Internal AML policies typically specify thresholds and escalation criteria for filing.

Can a SAR be submitted electronically?

Yes. SARs are routinely submitted via the authorized federal e‑filing portal. Maintain confirmation receipts and the submission audit trail as part of the case file.

Is there a filing fee?

No federal fee is required to file a SAR. Costs generally relate to internal resource allocation, legal review, and any ancillary notarization for related documents.

What must the narrative include?

A concise, chronological description explaining facts, actions, and reasons for suspicion. Include identifiers, transaction details, and any supporting evidence or documentation.

How long should records be kept?

Retain SAR files per federal and internal policies; many firms keep records for at least five years, and HIPAA or other rules may require longer retention when applicable.

Who can access SAR content internally?

Access should be limited to personnel with a documented need-to-know such as AML investigators, compliance officers, and legal counsel to avoid tipping-off risks.

Business Services SAR

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

BUSINESS SERVICES SAR

This Business Services SAR (the "Agreement") is made as of , by and between:

Service Provider: Client Name:

WHEREAS / RECITALS

WHEREAS, Service Provider is engaged in the business of providing professional business services, including but not limited to consulting, implementation, and advisory services; and

WHEREAS, Client desires to engage Service Provider and Service Provider agrees to provide such services under the terms and conditions set forth in this Agreement; and

WHEREAS, the parties intend that this Agreement memorialize the scope, deliverables, compensation, term, and confidentiality obligations associated with the services to be provided.

SCOPE OF WORK

Service Provider shall perform the services described below in a professional and workmanlike manner in accordance with generally accepted industry standards. Deliverables and acceptance criteria shall be documented and approved by Client as set forth herein.

Describe Services and Deliverables:

PAYMENT TERMS

Client shall pay Service Provider the fees set forth below in consideration for the services and deliverables. All fees are exclusive of applicable taxes unless otherwise stated.

Total Contract Amount (USD): Payment Schedule / Milestones: Invoices and Due Date: Late Payment Fee / Interest:

If any undisputed invoice remains unpaid after the due date, Client shall pay interest on the overdue amount at the rate specified above and shall reimburse Service Provider for reasonable costs of collection, including attorneys' fees.

TERM AND TERMINATION

This Agreement shall commence on , and shall continue until , unless earlier terminated in accordance with this Section.

Notice Period for Termination by Either Party (days):

Either party may terminate this Agreement for cause if the other party materially breaches any obligation under this Agreement and fails to cure such breach within the notice period specified above. Termination shall not relieve Client of its obligation to pay for services performed and expenses incurred through the effective date of termination.

CONFIDENTIALITY

"Confidential Information" means all non-public information disclosed by one party to the other that is designated as confidential or that reasonably should be understood to be confidential. Recipient shall (i) hold Confidential Information in strict confidence, (ii) not disclose it to any third party except as expressly permitted in this Agreement, and (iii) use it solely to perform its obligations or exercise its rights under this Agreement. This obligation shall survive termination for a period of three (3) years unless a longer period is required by applicable law.

Confidentiality Acknowledgement:

Recipient acknowledges and agrees to the confidentiality obligations set forth above.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the state specified below, without regard to its conflicts of law principles.

Governing State:

ENTIRE AGREEMENT

This Agreement, including all exhibits and statements of work executed pursuant hereto, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, representations, and understandings, whether oral or written. Any amendment must be in writing and signed by authorized representatives of both parties.

MISCELLANEOUS PROVISIONS

Each party represents and warrants that it has the power and authority to enter into this Agreement. Neither party shall be liable for any failure or delay due to causes beyond its reasonable control. The provisions of sections that by their nature are intended to survive termination shall survive any expiration or termination of this Agreement.

Service Provider (Print Name):

By (Signature):

Date:

Client (Print Name):

By (Signature):

Date:

What the Business Services SAR Is and who files it

A Business Services SAR (Suspicious Activity Report) is a formal record prepared by a covered business or financial institution to document and report transactions or behavior that may indicate money laundering, fraud, or other illicit activity. In the United States these reports are routed to the Financial Crimes Enforcement Network (FinCEN) under the Bank Secrecy Act framework and are maintained as part of a firm’s anti-money-laundering (AML) program. Accurate identification, a clear narrative of suspicious activity, supporting records, and secure transmission are central to the SAR’s usefulness to regulators and law enforcement.

Why a properly prepared SAR matters

A well-composed Business Services SAR satisfies statutory reporting duties, preserves institutional compliance defenses, and helps law enforcement detect and disrupt financial crime. It also documents an organization’s decision-making and demonstrates adherence to AML policies.

Which roles typically prepare and review SARs

Compliance, AML, and risk teams generally lead SAR preparation, supported by front-line staff who spot anomalies.

Front-line staff and customer service teams who detect unusual activity during routine transactions or account reviews.
AML/compliance officers who investigate, prepare narratives, and determine whether a report meets the reporting threshold.
Legal and senior management who review sensitive cases and maintain record retention and privilege assessments.

Internal legal counsel and senior compliance officers commonly review final submissions to ensure completeness and confidentiality safeguards.

Representative persons who sign or approve a SAR

Bank Compliance Officer

A senior compliance officer who oversees AML programs, verifies investigative findings, ensures the SAR narrative meets internal and regulatory standards, and authorizes submission in accordance with firm policy and BSA expectations.

AML Investigator

A specialist who collects transaction data and supporting documents, drafts the suspicious activity narrative, checks identifying information, and assembles exhibits for filing with the appropriate federal portal.

Step-by-step: preparing and submitting a Business Services SAR

Follow these sequential steps to collect data, document findings, obtain approvals, and submit securely to the federal portal.

01

Identify: Document the triggering event and preserve original records immediately.
02

Investigate: Gather transaction logs, account histories, and related communications.
03

Draft: Write a clear timeline and attach supporting exhibits.
04

Authorize & Submit: Get required approvals and file via the designated federal e‑filing system.

Workflow overview: from detection to filing

A concise workflow helps teams ensure consistency and maintain required evidentiary trails for each SAR.

Preserve Evidence: Secure transactional and communication records before any change or deletion.
Compile Narrative: Draft an objective, chronological description explaining the basis for suspicion.
Internal Review: Route to compliance or legal for validation and approval.
Submit Electronically: Transmit via the authorized federal e‑filing channel and retain confirmation.

Configuring an online SAR workflow for consistent eSubmission

Standardize fields, authentication, and retention settings in your e-filing workflow to reduce errors and support audits.

Field	Configuration
Authentication Method	Use SSO or two-factor authentication for preparers and approvers.
Document Format	Accept PDF/A for exhibits to ensure long-term fidelity.
Audit Trail	Enable timestamps, IP logging, and version history for every action.
Integrations	Connect to case management, CRM, or core banking systems for data auto-population.

Comparing eSignature options for SAR workflows and secure submissions

Common vendor differences affect cost, compliance add-ons, and envelope limits; compare features relevant to secure AML reporting workflows.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes (Business Premium+)	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes (BAA available)	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies by plan	Varies by plan	Varies by plan

Security and compliance basics for electronic SAR handling

In-transit Encryption: TLS 1.2/1.3 encryption

At-rest Encryption: AES-256 encrypted storage

Audit Trial: Detailed timestamps and action logs

Certifications: SOC 2 Type II and ISO 27001

HIPAA Support: BAA available for PHI workflows

21 CFR Support: 21 CFR Part 11-compatible controls

Key consequences of failing to file or mishandling a SAR

Civil Fines: Potential civil monetary penalties

Criminal Liability: Possible criminal prosecution under BSA

Tipping Off: Unauthorized disclosure may be unlawful

Operational Risk: Reputational and supervisory scrutiny

Recordkeeping Violations: Penalties for inadequate retention

Data Breach Exposure: Sensitive data exposure risks

Common pitfalls when preparing a Business Services SAR

Incomplete subject identification, such as missing DOB or partial account numbers, which can prevent linking to other records or investigations.
Vague or non-chronological narratives that fail to explain why activity is suspicious and omit key supporting facts.
Delays in preservation of original records or communications, creating gaps in evidence and increasing regulatory risk.
Unauthorized sharing of SAR content within the organization or externally, risking 'tipping off' and regulatory consequences.

Frequently asked questions about the Business Services SAR

Answers to common questions about preparation, submission, and handling of SARs in regulated U.S. environments.

Need help? Contact support

Who must file a SAR?
Covered financial institutions and certain businesses that detect suspicious activity under the Bank Secrecy Act must file. Internal AML policies typically specify thresholds and escalation criteria for filing.
Can a SAR be submitted electronically?
Yes. SARs are routinely submitted via the authorized federal e‑filing portal. Maintain confirmation receipts and the submission audit trail as part of the case file.
Is there a filing fee?
No federal fee is required to file a SAR. Costs generally relate to internal resource allocation, legal review, and any ancillary notarization for related documents.
What must the narrative include?
A concise, chronological description explaining facts, actions, and reasons for suspicion. Include identifiers, transaction details, and any supporting evidence or documentation.
How long should records be kept?
Retain SAR files per federal and internal policies; many firms keep records for at least five years, and HIPAA or other rules may require longer retention when applicable.
Who can access SAR content internally?
Access should be limited to personnel with a documented need-to-know such as AML investigators, compliance officers, and legal counsel to avoid tipping-off risks.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now