XTROQComply
NewUpdated for UAE Federal Decree-Law No. 10 of 2025

AML Screening & KYC Software in the UAE

Your compliance platform for

Sanctions screening

Xtroq Comply is AML/CFT compliance software for businesses in the United Arab Emirates. It screens every customer, owner and controller against the UAE Local Terrorist List, the UN Consolidated List, OFAC and UK sanctions, PEP lists and the news, rates their risk, re-screens them whenever a list changes and keeps goAML-ready records for your supervisor.

4hSanctions lists refreshed every 4 hours عArabic and English name matching ✓goAML-ready records
Screening record · SCR-00418Fictional example
Yermolai Feofilaktovich Khvostopyatkin
Ермолай Феофилактович Хвостопяткин
Individual · born 1899 · invented name for illustration
  • UAE Local Terrorist ListEOCN · bindingNo match
  • UN Consolidated ListUN Security Council · bindingNo match
  • OFAC SDN and ConsolidatedNo match
  • UK Sanctions ListNo match
  • Politically exposed personsNo match
  • Special interest and internal watchlistNo match
  • Adverse mediaEnglish and Arabic newsNothing relevant
Clear: re-screened on every list updateRisk: Low
At a glance

What is Xtroq Comply?

Xtroq Comply is a web-based AML/CFT compliance platform built for the UAE. It brings sanctions, PEP and adverse media screening, KYC and KYB onboarding, customer risk rating, ongoing monitoring and goAML reporting records into one place, with an audit trail behind every decision.

Category
AML/CFT and KYC compliance software
Market
United Arab Emirates: mainland and free zones
Used by
DNFBPs, virtual asset service providers, money service businesses and financial institutions
Lists
UAE Local Terrorist List, UN, OFAC, UK, PEP, special interest, internal watchlist
Updates
Sanctions lists every 4 hours, PEP list daily, automatic re-screening on every change
Law
Federal Decree-Law No. 10 of 2025, Cabinet Resolution No. 134 of 2025, EOCN guidance
Reporting
STR, SAR, CNMR and PNMR records with deadlines, for filing on goAML
Languages
English interface; names matched in Arabic and English
Access
Any web browser; sign up online or try the demo first
Features

Everything a UAE compliance officer needs in one place

From the first customer document to the report on goAML, each step is recorded and ready to show your supervisor.

Sanctions screening

UAE Local Terrorist List, UN Consolidated List, OFAC SDN and Consolidated, and the UK Sanctions List, downloaded from the official publishers every 4 hours.

PEP and special-interest screening

Politically exposed persons, plus wanted persons, export-control and debarment lists and your own internal watchlist.

Adverse media screening

News checks in English and Arabic, with each article reviewed as relevant or not relevant and a reason kept on record.

KYC and KYB onboarding

Individuals and companies with every shareholder and beneficial owner. Passports, Emirates IDs and trade licences are read for you.

Risk rating and EDD

Customer risk from type, countries, PEP status, products and screening results, with enhanced due diligence and approval for high risk.

goAML records and registers

STR, SAR, CNMR and PNMR records with deadlines, plus PEP and STR registers and exports for supervisors and auditors.

Screening lists

Screened against the lists your supervisor expects

When any list changes, every customer, owner and controller is re-screened automatically and new potential matches go to your compliance officer.

UAE Local Terrorist List UN Consolidated List OFAC SDN and Consolidated UK Sanctions List PEP Politically exposed persons Special Wanted persons and debarment Internal Your own watchlist Media English and Arabic news
How it works

From the first document to the goAML report

The whole customer due diligence cycle in five steps.

  1. Onboard

    KYC for individuals and KYB for companies. Upload documents or send the customer a secure onboarding link.

  2. Screen

    Sanctions, PEP, special-interest and news checks for the customer and everyone behind it, with Arabic names matched in all spellings.

  3. Rate the risk

    Low, Medium, High or Prohibited, with enhanced due diligence and senior management approval where needed.

  4. Monitor

    Re-screening on every list update, reminders for expiring IDs and licences, and periodic reviews by risk level.

  5. Report

    STR, SAR, CNMR and PNMR records with deadlines, ready for filing on goAML, and registers for inspections.

Who it's for

AML software for every regulated sector in the UAE

Forms, red flags and compliance documents follow your sector.

Real estate brokers and agents

Buyer and seller due diligence and real estate activity reports.

Dealers in precious metals and stones

DPMS customer checks and cash transactions of AED 55,000 or more.

Accountants and auditors

Client acceptance and ongoing engagement screening.

Corporate service providers

Company formation, nominee arrangements and beneficial owners.

Lawyers, notaries and legal consultants

Transactions carried out for clients.

Virtual asset service providers

Customer and counterparty screening.

Money service businesses

Exchange houses and remittance providers.

Financial institutions

Customer screening, monitoring and records.

UAE AML law

UAE AML law, built into the workflow

The deadlines and rules of targeted financial sanctions are part of the software, so nothing depends on memory.

Confirmed match on the UAE or UN listFreeze without delay, within 24 hours, and file a CNMR within 5 business days. The customer is rated Prohibited.
Partial name matchSuspend the transaction and file a PNMR within 5 business days, with the deadline tracked.
Politically exposed personsRated high risk, with enhanced due diligence and senior management approval before onboarding.
FATF high-risk countriesCall-for-action and increased-monitoring countries raise the risk rating, updated after each FATF plenary.
Beneficial ownershipOwners with 25% or more, and anyone with control, identified, verified and screened with the company.
Record keepingScreenings, decisions and documents kept for at least 5 years, and former customers screened for 5 years.

Based on Federal Decree-Law No. 10 of 2025, Cabinet Resolution No. 134 of 2025, Cabinet Decision No. 74 of 2020 and EOCN guidance on targeted financial sanctions. Last reviewed October 2026.

Documents and security

Documents ready for your inspection file

Drafted for your sector with your organisation's details and logo, for you to review, tailor and approve.

Policies and records

  • AML/CFT/CPF compliance policy and procedures
  • Enterprise-wide risk assessment methodology
  • KYC and KYB forms, PEP, source of funds and source of wealth declarations
  • Enhanced due diligence checklist
  • PEP register and STR / SAR register
  • Training plan and attendance records

Your data, kept apart

  • Each organisation's data in a private database only its members can read
  • Roles for owners, compliance officers, analysts and viewers
  • Every screening, decision and change recorded in an audit trail
  • Encrypted connections and a private document store
FAQ

AML screening in the UAE: common questions

What is AML screening software?

AML screening software checks customers, their owners and controllers against sanctions lists, politically exposed person (PEP) lists and adverse media, records the result and the decision taken, and repeats the check when the lists change. Xtroq Comply does this for businesses in the UAE and adds KYC and KYB onboarding, risk rating and goAML records.

Do UAE businesses have to screen customers against sanctions lists?

Yes. Financial institutions, designated non-financial businesses and professions (DNFBPs) and virtual asset service providers in the UAE must screen customers and related parties against the UAE Local Terrorist List and the UN Consolidated List before onboarding and whenever the lists are updated, freeze funds without delay on a confirmed match and report to the authorities, under Federal Decree-Law No. 10 of 2025, Cabinet Decision No. 74 of 2020 and the guidance of the Executive Office for Control and Non-Proliferation (EOCN).

What is the UAE Local Terrorist List?

It is the list of individuals and entities designated by the UAE Cabinet under the UAE's terrorism and targeted financial sanctions laws, published by the Executive Office for Control and Non-Proliferation (EOCN). Together with the UN Consolidated List, it is binding on every business in the UAE.

What are a CNMR and a PNMR?

A Confirmed Name Match Report (CNMR) is filed through goAML after a confirmed match on the UAE Local Terrorist List or the UN Consolidated List and the freezing of the funds. A Partial Name Match Report (PNMR) is filed when a match cannot be confirmed or ruled out, with the transaction suspended. Both are due within 5 business days.

What is goAML?

goAML is the reporting platform of the UAE Financial Intelligence Unit. Regulated businesses use it to file suspicious transaction and activity reports (STR and SAR), targeted financial sanctions reports (CNMR and PNMR) and sector reports such as the DPMS and real estate cash transaction reports.

Which lists does Xtroq Comply screen against?

The UAE Local Terrorist List, the UN Consolidated List, the OFAC SDN and Consolidated lists, the UK Sanctions List, a PEP list, special-interest lists (wanted persons, export-control and debarment lists) and your own internal watchlist, plus adverse media in English and Arabic. Sanctions lists are refreshed every 4 hours and the PEP list daily.

How often are customers re-screened?

Every customer, owner and controller is re-screened automatically when a list changes, and reviewed periodically according to their risk level. Former customers stay under screening for 5 years.

Does Xtroq Comply match Arabic names?

Yes. Names are matched across their Arabic and English spellings and transliterations, such as Mohammed, Muhammad and Mohamed, with date of birth and nationality used to separate namesakes.

Who is Xtroq Comply for?

UAE businesses with AML/CFT obligations: real estate brokers and agents, dealers in precious metals and stones, accountants and auditors, corporate service providers, lawyers and notaries, virtual asset service providers, money service businesses and financial institutions.

Is customer data kept separate?

Yes. Each organisation's data is kept in a private database that only its own members can read, and every screening, decision and change is recorded in an audit trail.

Get started

Set up your organisation and screen your first customer today

Create an account, add your organisation and invite your compliance team. The sanctions lists are already loaded.