Establishing secure connection…Loading editor…Preparing document…

Legal AML Appendix

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

LEGAL AML APPENDIX

This Anti‑Money Laundering Appendix ("Appendix") is entered into as of by and between Client Name: , an entity organized as under the laws of with principal place of business at , and Service Provider Name: , an entity organized as under the laws of with principal place of business at (each a "Party" and together the "Parties").

Recitals

WHEREAS, the Parties have entered into or anticipate entering into one or more commercial agreements under which the Service Provider will provide services that may involve the receipt, transfer or facilitation of funds, goods or information subject to anti‑money laundering and sanctions laws;

WHEREAS, the Parties wish to allocate responsibilities and procedures to prevent and detect money laundering, terrorist financing and sanctions violations, and to ensure compliance with applicable anti‑money laundering, counter‑terrorist financing and sanctions laws and regulations; and

WHEREAS, each Party represents that it maintains internal controls, policies and procedures reasonably designed to comply with applicable anti‑money laundering and sanctions obligations and desires to restate certain obligations in this Appendix.

NOW, THEREFORE, in consideration of the mutual covenants set forth herein and in the underlying agreement between the Parties, the Parties agree as follows:

1. Definitions

For purposes of this Appendix, the following terms shall have the meanings set forth below. "AML Laws" means all applicable laws, regulations, rules and sanctions administered by competent authorities relating to anti‑money laundering, counter‑terrorist financing and economic sanctions. "Customer Due Diligence" or "CDD" means the processes described in Section 3 below. "Suspicious Activity Report" or "SAR" means any internal or external report required by AML Laws relating to suspected money laundering or terrorist financing.

2. Compliance Program

Each Party shall implement and maintain, at its own expense, an AML compliance program reasonably designed to ensure compliance with all AML Laws. Such program shall include written policies and procedures, risk‑based CDD, ongoing monitoring, recordkeeping, reporting of suspicious activities, employee training and designation of an AML compliance officer.

3. Customer Due Diligence (CDD)

Each Party shall perform CDD prior to establishing a business relationship and on an ongoing basis, including but not limited to: verifying the identity of beneficial owners and authorized signatories; obtaining and retaining identification and documentary evidence; assessing the purpose and intended nature of the relationship; and performing risk‑based monitoring of transactions. Where record retention periods are prescribed by AML Laws, Parties shall retain records for at least the minimum period required and in any event for no less than five (5) years following the termination of the relationship unless a longer period is required.

4. Enhanced Due Diligence (EDD)

Where a Party determines, in its reasonable discretion, that a customer or transaction presents higher risk (including politically exposed persons, complex ownership structures, unusual transaction patterns or cross‑border activity involving high‑risk jurisdictions), that Party shall apply EDD measures commensurate with the risk, which may include obtaining additional identifying information, senior management approval, source of funds verification and heightened transaction monitoring.

5. Suspicious Activity Reporting; Law Enforcement

Each Party shall promptly file any SARs or equivalent reports required by AML Laws and shall not disclose to any third party the existence or content of a SAR except as required by applicable law. If a Party receives a lawful request from a competent authority relating to suspected wrongdoing, the receiving Party shall notify the other Party promptly to the extent permitted by law and shall cooperate in responding to lawful requests.

6. Sanctions Screening

Each Party shall maintain screening procedures to identify persons, entities or jurisdictions subject to economic or trade sanctions, and shall not knowingly facilitate transactions that would cause a violation of applicable sanctions. If a Party identifies a match on a sanctions list, that Party shall block or reject the transaction as required by law and shall promptly notify the other Party if the transaction involves the other Party's performance or customers.

7. Recordkeeping and Audit Rights

Each Party shall retain all records necessary to demonstrate compliance with this Appendix and with AML Laws. Upon reasonable prior written notice, and subject to applicable confidentiality and data protection laws, each Party shall permit the other Party or its independent auditor to conduct a review or audit of relevant records, policies and procedures to the extent necessary to verify compliance; such audits shall be conducted during normal business hours and in a manner that minimizes disruption.

8. Training and Monitoring

Each Party shall provide periodic AML training to employees with responsibilities under this Appendix and implement monitoring systems to detect patterns of activity indicative of money laundering, terrorist financing or sanctions evasion. Training materials and frequency shall be appropriate to the Party's size and risk profile.

9. Cooperation and Notices

The Parties shall cooperate in connection with any investigation, audit or regulatory inquiry concerning AML matters arising from the services. Notices required under this Appendix shall be sent to the contacts designated below:

10. Representations and Warranties

Each Party represents and warrants that: (a) it maintains policies and procedures reasonably designed to comply with AML Laws; (b) it is not subject to sanctions or owned or controlled by any person or entity that is subject to sanctions such that performance under the Agreement would cause a violation of applicable law; and (c) it will promptly update the other Party in writing if any representation in this Section becomes inaccurate.

I certify that Party A maintains an AML program and is not presently sanctioned or owned or controlled by a sanctioned person.
I certify that Party A will notify Party B if it becomes aware of any PEP relationships that materially affect risk.
I certify that Party B maintains an AML program and is not presently sanctioned or owned or controlled by a sanctioned person.
I certify that Party B will notify Party A if it becomes aware of any PEP relationships that materially affect risk.

11. Indemnification

Each Party (the "Indemnifying Party") shall indemnify, defend and hold harmless the other Party, its officers, directors and affiliates (the "Indemnified Party"), from and against any losses, liabilities, fines, damages and expenses (including reasonable attorneys' fees) arising from or relating to a material breach of the Indemnifying Party's obligations under this Appendix or its failure to comply with AML Laws, except to the extent caused by the gross negligence or willful misconduct of the Indemnified Party.

12. Confidentiality

Information disclosed pursuant to this Appendix, including SAR filings and related investigative materials, is confidential and shall be handled in accordance with the confidentiality provisions of the underlying agreement, except as disclosure is required by law or permitted to comply with AML Laws.

13. Term and Termination

This Appendix shall commence on the effective date set forth above and shall remain in effect for the term of the parties' underlying agreement. Either Party may terminate this Appendix with immediate effect upon written notice if the other Party materially breaches an AML representation or obligation and the breach is not cured within thirty (30) days following written notice, or immediately if required by applicable law.

14. Amendments; Waiver; Counterparts

Any amendment to this Appendix must be in writing and signed by authorized representatives of both Parties. No failure or delay in exercising any right shall operate as a waiver. This Appendix may be executed in counterparts, each of which shall be deemed an original and all of which together shall constitute one instrument.

15. Governing Law; Entire Agreement; Severability

This Appendix shall be governed by and construed in accordance with the laws of without regard to choice‑of‑law principles. This Appendix, together with the underlying agreement, constitutes the entire agreement of the Parties with respect to the subject matter hereof. If any provision of this Appendix is held to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

16. Additional Procedures

17. Audit Findings and Remediation

If an audit or regulatory examination reveals material deficiencies in a Party's AML program, that Party shall promptly propose and implement a written remediation plan acceptable to the other Party, and shall provide reasonable updates on remediation progress until completion.

Party A - Printed Name:

By:

Date:

Party B - Printed Name:

By:

Date:

Enter text✕

What the Legal AML Appendix Is and why it matters

The Legal AML Appendix is a contract attachment that documents anti‑money‑laundering (AML) controls, customer due diligence procedures, and reporting obligations between parties. It records representations, certifications, and the identity verification steps each party must follow to meet regulatory expectations. The appendix clarifies who performs Know Your Customer (KYC) checks, how suspicious activity is escalated, and which records will be retained so the parties can demonstrate compliance to auditors or regulators.

Why include a Legal AML Appendix in contracts

A clear AML appendix reduces regulatory ambiguity by assigning duties, documenting identity verification standards, and establishing recordkeeping expectations under federal law. It helps demonstrate adherence to the Bank Secrecy Act and related guidance and supports internal audit and compliance reviews.

Why include a Legal AML Appendix in contracts

Which teams and organizations commonly use this appendix

The Legal AML Appendix is used by parties that require documented AML controls during commercial relationships, particularly where payment flows, escrow, or high-risk customer profiles exist.

  • Financial institutions and payments teams assessing counterparty risk and onboarding corporate clients.
  • Legal and compliance departments seeking contractual evidence of KYC and transaction monitoring.
  • Third‑party service providers that must demonstrate AML controls to enterprise customers.

Use the appendix when you need a written, contract-level record of AML responsibilities that auditors, banks, or regulators can review.

Key signer roles and sample approvers

Compliance Officer

Typically the person who certifies that the organization’s AML program meets internal policy and regulatory requirements; signs to confirm procedures for KYC, screening, and suspicious activity reporting are in place and documented.

Authorized Signatory

A senior business or legal representative authorized to bind the company contractually; certifies factual statements about customer screening, sanctions checks, and record retention that appear in the appendix.

Security and compliance items to include

Encryption: TLS 1.2/1.3, AES‑256
Audit Trail: Tamper-evident logs
BAA Requirement: If PHI present
Authentication: 2FA for users
Access Controls: Role-based permissions
Retention Policy: Documented retention

Regulatory and contractual risks to watch for

Regulatory Fines: Enforcement penalties from agencies
Civil Liability: Contract damages and indemnities
Operational Disruption: Account freezes or transaction holds
Reputational Harm: Public enforcement exposure
Recordkeeping Violations: Failure to retain required records
Sanctions Violations: OFAC or economic sanction exposure

Common preparation pitfalls

  • Incomplete identity information for signatories, which prevents reliable KYC verification and delays acceptance.
  • Vague descriptions of monitoring obligations, leaving disagreement about who escalates suspicious transactions.
  • Missing retention periods or conflicting recordkeeping clauses that hinder auditability and legal defense.
  • Failure to align appendix language with internal policies or applicable laws, creating compliance gaps.

How to complete the Legal AML Appendix — step by step

Follow these core steps to prepare and execute a clear, enforceable AML appendix.

  • 01
    Collect identities: Obtain full legal names and government IDs for all parties.
  • 02
    Define checks: Specify KYC, sanctions, and adverse‑media screening frequency.
  • 03
    Assign duties: Name the party responsible for monitoring and reporting.
  • 04
    Sign and date: Authorized signatories must sign, date, and retain copies.

Where to send the completed appendix and what happens next

Routing the appendix correctly ensures timely review and onboarding; the steps below describe typical destinations and actions.

  • Submit to Compliance: Send the signed appendix and KYC documents to the compliance mailbox or portal.
  • Verification: Compliance runs identity checks and sanctions screening per stated controls.
  • Approval: If controls pass, compliance signs off and notifies business teams.
  • Record Storage: Retain the appendix and supporting files per the retention policy.

Digital submission and platform considerations

Use a secure eSignature and document platform that supports audit trails, strong authentication, and encrypted storage when submitting AML appendices.

  • File formats: PDF, DOCX, and searchable PDFs
  • Integrations: CRM and storage integrations like Salesforce and Google Workspace
  • Authentication: Email link, SMS code, or advanced signer authentication

Ensure the chosen platform can produce a verifiable audit trail, support long‑term retention formats, and integrate with your compliance workflows.

How to configure an online AML appendix workflow

Use these settings when building a digital signing flow for the AML appendix to ensure consistency and traceability.

Field Configuration
Signer Order Sequential assignment with Compliance last
Authentication Email + optional SMS code for high-risk signers
Document Locking Lock fields after final signature
Audit Options Capture IP, timestamp, and event log

Essential elements to include in a professional Legal AML Appendix

A robust appendix is precise about identity checks, monitoring cadence, reporting duties, and recordkeeping; include these six elements for clarity.

Identity Verification

Specify ID types, acceptable documents, and verification methods used.

Screening Procedures

Define sanctions, PEP, and adverse‑media screening and frequency.

Reporting Obligations

Assign responsibility for filing SARs and internal escalation.

Record Retention

State retention periods and storage format for auditability.

Representations

Declare each party’s certifications about compliance and controls.

Audit Rights

Allow reasonable access for audit and regulatory inquiries.

Real examples of appendix use in compliance workflows

These real customer scenarios show how organizations attach AML appendices to contracts to document controls and reduce onboarding friction.

BIS — CEO Dan Rotelli

We required a clear compliance appendix before executing vendor agreements to standardize reviews.

  • The appendix captured KYC standards and audit rights.
  • This saved repeated legal reviews and provided a clear audit trail during third‑party assessments, simplifying regulator responses and internal governance.

Fertility Centers of Illinois — John Butler

Healthcare partner agreements included an AML appendix to limit unnecessary PHI sharing.

  • The document specified BAA triggers and minimal required identity data.
  • As a result, the legal and compliance teams could approve integrations faster while maintaining HIPAA‑aligned controls and documented consent.

Frequently asked questions about the Legal AML Appendix

Answers to common questions about validity, signatures, notarization, and retention when using an AML appendix.


Need help? Contact support

Typical eSignature vendor considerations for signing compliance appendices

Compare common pricing and capabilities for electronic signatures when choosing a platform to sign and store AML appendices; signNow is listed first as a reference option.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial Varies by plan Varies by plan Varies by plan Varies by plan
Bulk Send Yes (Business Premium) Varies by plan Varies by plan Varies by plan Varies by plan
Audit Trail Yes Yes Yes Yes Yes
HIPAA Compliant Yes Varies by plan Varies by plan Varies by plan Varies by plan
Envelope Cap No cap 100 envelopes/user/year Varies by plan Varies by plan Varies by plan
be ready to get more
Join over 28 million airSlate SignNow users