Back to Blog
Guide
October 4, 20269 min read

Data hosted in Australia: questions for a vendor

Data hosted in Australia is a contract term or it is a brochure. A law firm asks where the customer record is stored, who can open it, and what export exists when the firm leaves.

Quick answer

Your record-keeping obligation stays with the firm even when a vendor holds the file. 'We use the cloud' is not a country. Ask for the place of storage as a clause, the roles that can open a matter, and an export you can keep. The firm suite does not move that obligation, and it does not include a private data-centre tour.

People search β€œAML data residency Australia” when a law firm is comparing vendors and cannot tell a hosting claim from a contract term. Checked against AUSTRAC's obligations and compliance page on 4 October 2026. This is general information, not legal advice. This page does not reproduce that guidance. What the tool itself should cover is what a free AML tool should include. The sector map is /tranche-2.

A country is a clause

AML data residency Australia is a phrase vendors put on a page because buyers type it, and the useful version is narrower. Ask where this customer's record is stored, who at the firm and at the vendor can open it, and what file you receive if you leave. If those answers are not in a document you can keep, you have a slogan.

None of that appoints the vendor as the reporting entity. AUSTRAC's interest in the program and the records sits with the firm. A server address does not enrol you, and it does not complete customer due diligence.

  • Ask for the place. A named country in the contract is an answer. 'Enterprise cloud' is a product name.
  • Ask who can open a file. Your roles, and the vendor's access for support, should be writable sentences. 'Only engineers, sometimes' is not.
  • Ask for the exit. An export of the records your program says you keep is the test. A login that dies on the notice date is a gap.
  • Do not outsource the duty. Australian hosting, even when it is real, leaves the firm's obligations where they were.

Questions and weak answers

A sorting aid for a hosting conversation. This table does not reproduce AUSTRAC's obligations guidance.

QuestionA useful answerA weak answer
Where is the customer record stored?A named country in a clauseWe use the cloud
Who can open a file?Firm roles, plus the vendor access you acceptOnly engineers, sometimes
What do we keep if we leave?An export your program can live withA login that ends on notice
Is Australian hosting a term?A sentence you can read in the contractA badge on the website

Where the residency page stops

This page is the questions for a vendor. It is not a ranking of products. A wider buying note sits on best AML software in Australia. This page does not give a privacy ruling and it does not certify any host.

What the client pays

On FreeAML the firm suite is A$0. The firm emails the client a link. Verification is client-pays. On the public list a personal KYC check is A$20 and a company or trust KYB check is A$40. Use KYB when the customer is a company or a trust. A promise about where servers sit is not included in the firm suite, and neither is a legal opinion on privacy. Confirm the live amounts on FreeAML pricing. FreeAML does not certify that a vendor hosts data in Australia, or move your record-keeping duty to the vendor.

Frequently Asked Questions

Read the clause. Then send the link.

The firm suite is A$0. The client pays the check. Hosting questions are for the contract, not a line on the KYC price.

View pricing

Questions: team@freeaml.com.au