Running an AML compliance programme is ongoing work. Businesses that do not need a large in-house compliance team may still need reliable, recurring AML capacity: someone keeping the workplan moving, applying controls consistently, and following remediation through to completion.
ComplyFactor provides fractional and outsourced AML compliance officer support to financial intermediaries, portfolio managers, trustees and other AML-obliged businesses in Switzerland, supplementing an internal compliance officer or providing recurring external capacity where the work has outgrown current resources.
We scope every engagement around your actual regulatory status and organisational setup, so the support we provide is structured correctly from the outset rather than adjusted after the fact.
Fractional AML compliance support is recurring, external compliance capacity, not a one-off report and not simply advice on what should change. It means ComplyFactor helps keep your AML compliance programme moving: applying controls consistently, maintaining documentation, tracking open items, and giving management the information it needs to oversee the programme. Advice tells a business what to fix; fractional support helps keep the fix, and the programme around it, actually running.
Identifies what should change.
Our work can include programme coordination, maintaining an AML workplan and a recurring compliance calendar so tasks don't slip, and keeping policies and procedures aligned with how the business actually operates rather than left to drift from operational reality. On the risk side, we can support maintenance and practical application of the AML risk analysis, and help teams apply CDD, KYC and EDD processes consistently across customer files. We can review control evidence and monitoring outputs, track open issues and remediation actions through to closure, and prepare the management information and governance reporting your business needs to oversee the programme. Where relevant, our work can also include coordinating training and internal compliance communication, and supporting the implementation of regulatory change as it reaches your specific business.
AML workplan and recurring compliance calendar.
Policy and procedure maintenance, aligned with actual operations.
Consistent application of customer due-diligence processes.
Control evidence review, issue tracking, remediation through to closure.
Management information and governance reporting.
Internal compliance coordination and regulatory-change implementation, where relevant.
External support can work as a supplement, sitting alongside an internal AML compliance officer during busy periods or capability gaps, or as recurring capacity, providing external compliance capacity for a smaller institution without requiring a large in-house team. It can also be scoped narrowly, to a single workstream such as CDD remediation, or to a defined period, such as while a business integrates a recent change. Not every formal compliance role can be outsourced in every case; the permissible model depends on the business's entity type and applicable supervisory framework.
Internal team plus external AML capacity during busy periods or capability gaps.
Defined ongoing workstreams without building a large in-house team.
Scoped narrowly to one area, such as CDD remediation.
Support through a specific period of business change.
Not every formal compliance role can be outsourced in every case; the permissible model depends on the business's entity type and applicable supervisory framework.
Businesses typically reach out when:
Compliance workload has outgrown internal capacity
Remediation from a gap analysis or independent review needs sustained follow-through to close out
Management wants more structured, recurring AML reporting
Regulatory or business change has created additional compliance work
Policies exist on paper but implementation has become inconsistent in practice
We first determine which supervisory framework applies to your business, then define what can be supported externally and what must remain within your organisation. This matters because FINMA has been explicit that responsibility for an outsourced function, including risk management and compliance, stays with the institution; FINMA's 2026 guidance on portfolio management specifically flagged cases where outsourcing to external providers produced standardised, rather than institution-specific, controls and unclear responsibilities.
We structure support the other way: your business retains the resources, information access and oversight it needs, responsibilities are agreed and documented up front, and management and the governing body keep the responsibilities the applicable framework places on them. Our role is to make those responsibilities easier to discharge well, not to take them away.
External support does not automatically transfer regulatory responsibility away from your organisation.
The right operating model differs by entity type. We confirm which framework applies to you and what it permits before we define scope, rather than assuming one model fits every client.
Direct supervision, with entity-specific outsourcing requirements.
FINMA licence, with ongoing supervision through an SO where applicable.
Support permitted depends on the affiliated SRO's own rules.
Confirm entity type and supervisory route before defining anything else.
Agree what can be supported externally and what must remain internal.
Establish what needs attention first, based on risk and existing findings.
Set the pattern for ongoing work and reporting.
Apply controls, review evidence, and keep work moving.
Maintain a live record of open items and their status.
Keep management and the governing body informed as agreed.
Depending on scope, this can include:
Responsibility Matrix
AML Workplan & Calendar
Action & Issue Tracker
Remediation Tracker
Management Reporting
No ambiguity about who owns what, from the outset.
Not one generic outsourcing template applied to every business.
Not policy documents alone, and not a one-off engagement.
Work is documented and reviewable, not informal.
Attention goes where it matters most first.
Structured reporting, not ad hoc updates.
Scope reflects what your business runs today, not a standard checklist.
Where both are relevant, operational support and independent review stay distinct roles.
The revised AMLA entered into force on 1 October 2026.
The new Federal Act on the Transparency of Legal Entities and the Identification of Beneficial Owners also entered into force on 1 October 2026.
The AMLO-FINMA consultation closed on 9 June 2026. FINMA has not yet published the final revised ordinance, so those proposals should not be treated as current requirements.
Ongoing compliance support should reflect the changes already in force as they apply to your business.
Yes. We can scope support narrowly, for example to CDD remediation, risk-analysis maintenance, or monitoring, rather than the full programme. Scope can also be widened later if your needs change.
We typically start with your entity type and supervisory status, current AML policies and procedures, an outline of your existing compliance resourcing, and any open findings from a prior review or gap analysis. This lets us define a realistic scope and responsibility split before work begins.
Yes. Fractional support is commonly structured to work alongside your existing team and advisers, with responsibilities agreed between everyone involved rather than assumed.
Yes. Support is typically structured to flex with workload, for example scaling up during a remediation programme or a period of business change, and scaling back once things stabilise.
Speak with ComplyFactor about your regulatory status, current compliance structure and where you need recurring external support. We'll help define a scope that reflects what can be supported externally and what needs to stay within your organisation.