What must be in place before a goAML application?
Prepare the business record, nominated user and access arrangements together.
| Check | What to prepare | Why it matters |
|---|---|---|
| Activity and supervisor | The trade licence and an accurate description of the activities actually carried out. | The registration route must match the entity’s supervisory framework. |
| Nominated compliance contact | Management’s appointment authorisation and the required identification documents. | Application support does not appoint someone as your MLRO. |
| Working contact channels | An accessible email address, mobile number and authorised authentication arrangements. | Registration and security messages must reach the responsible person. |
| Both registration stages | Complete the relevant SACM access stage and goAML entity registration. | Starting the access process is not confirmation of completed registration. |
goAML registration enables the reporting process. Customer checks, risk assessment and reporting decisions remain separate responsibilities.
The engagement covers the agreed account and registration work; management remains responsible for appointments and the business’s ongoing AML obligations.
Confirm the activity and supervisory route
The Ministry of Economy and Tourism registration guide addresses DNFBPs under its supervision and distinguishes financial free zones from that route. We review your actual activities and licensing details before preparing the application. A business description that is too broad or a category copied from another company can lead to the wrong registration route. Where the classification requires specialist interpretation, that review is identified separately.
The engagement also establishes who is authorised to represent the business and who will own ongoing access. Registration should not depend on an unexplained personal account belonging to a former employee or an external contact who no longer acts for the company.
Prepare a consistent entity and user record
The current official goAML guide describes SACM/authenticator registration followed by entity registration and lists the trade licence, an appointment authorisation and identification for the compliance officer or MLRO among the supporting records. We compare names, licence details and contact information across the documents before submission.
Management approves the appointment and application information. We coordinate document preparation and responses, while authorised users retain control of authentication and account access through the official process.
Know what the registration does not cover
An approved registration provides access for the relevant reporting obligations. It does not establish that customer due diligence, risk assessment, sanctions controls, staff training or reporting procedures are adequate. Those matters need their own responsibilities and scope. The handover records application references, authorised contacts and outstanding actions so the business can maintain the account. Filing a suspicious-activity report or deciding whether a transaction requires reporting is separate from registration support.
Documents and records to prepare
Tick the records you already have. The final request depends on your entity, the period and the work agreed. Please do not send financial records through this website.
0 of 7 items checked
How the work starts
Confirm the requirement
We review activities, licensing and any existing registration to identify the relevant supervisory route and scope of assistance.
Prepare the appointment records
Management confirms the authorised compliance contact. We check the supporting documents and identify discrepancies before the application is prepared.
Coordinate registration
We support the agreed official registration steps and maintain a record of queries, responses and items awaiting action by the authorised user.
Complete the handover
We record the application outcome and access responsibilities, and distinguish any remaining account changes or ongoing compliance work from the registration engagement.
What affects the scope and fee?
- Entity structure and supervisory route
- New registration or existing-account remediation
- Completeness of appointment and identity records
- Authority queries and document amendments
- Additional compliance work requested separately
We set out the deliverables, responsibilities and fee in the proposal. Work outside that scope is discussed before it is added.
goAML registration FAQs
Does every UAE company need goAML registration?
Applicability depends on the business activities and the relevant supervisory framework; it should not be assumed solely from having a UAE licence. We review the activity and authority information at the start. If the classification is uncertain, it requires a specific assessment before choosing a registration category or submitting the application.
Can Firswood choose our MLRO for us?
Management must make and authorise the relevant appointment. Registration assistance does not itself appoint Firswood or any individual as your MLRO. We can explain the information required for the application and identify gaps in the appointment records. Any ongoing compliance role would require a separate, expressly agreed assessment and engagement.
Is registration the same as AML compliance?
No. Registration is one part of the reporting infrastructure. The business still needs to address its applicable policies, customer checks, risk assessment, training and reporting responsibilities. We keep the registration scope clear so that an application confirmation is not presented as evidence that the entire compliance framework has been reviewed.
What if our previous MLRO has left?
Start by identifying the existing registration, business-controlled contact channels and appointment history. We can assess the required account or contact change and help organise supporting records within the agreed scope. Do not simply reuse a departing person’s credentials; management needs to establish the correct authorisation and official change process.
Can you guarantee approval or a completion date?
No. We can help prepare a consistent application and respond to requests within our agreed responsibilities, but the authority controls review and approval. Missing documents, incorrect categories and account-access issues can affect progress. We assess those dependencies before proposing a timetable and distinguish preparation time from authority processing.
Will you submit suspicious transaction reports for us?
That is not included in a registration engagement. Decisions and filings relating to suspicious activity involve separate responsibilities, confidentiality and professional requirements. If you need help beyond account setup, describe the requirement so the appropriate scope can be assessed without treating registration access as blanket authorisation to report on the business’s behalf.
Sources and further reading
Original page research: 5 October 2026. Service comparison and preparation checklist updated: 9 October 2026. Requirements can change; check the linked authority guidance for the latest position.
How we use sources
