XPM, Karbon and FYI do not have to run the AML check

People ask which AML tools integrate with Xero Practice Manager, Karbon or FYI because the firm already lives in one of those systems and does not want a second login for every new company. Checked against AUSTRAC's overview of initial customer due diligence on 5 October 2026. This is general information, not legal advice. This page does not reproduce that guidance. Choosing a tool is which AML software suits an Australian firm. A legal practice system is a different conversation, in LEAP, AML and InfoTrack. Accountants and designated services are in AML for accountants. The sector map is /tranche-2.

The record matters more than the logo

Initial customer due diligence is a set of matters the firm establishes on reasonable grounds before it provides the designated service, unless a delay rule that really applies says otherwise. AUSTRAC's overview lists the customer's identity, anyone the customer is acting for, anyone acting for the customer and their authority, beneficial owners where the customer is not an individual, whether relevant people are politically exposed or designated for sanctions, and the nature and purpose of the matter. Source of funds and source of wealth come in for particular higher-risk cases, not as a slogan on every file. None of those matters names a practice-management product.

Xero Practice Manager, Karbon and FYI are where many Australian firms already keep the job, the email and the documents. They are good places to store the result. They are not, by themselves, the check. A connector that pushes a client's name into an AML tool and pulls a PDF back can save retyping. It can also hide a failed sync, so the matter looks complete in Karbon while the check never left the other system. If you buy a connector, test one company and one trust before you trust it. If you do not buy one, a saved PDF on the job still satisfies the practical need: the officer can open the result later.

What to ask before you pay for a connector

• Which system, which objects. A contact sync is not a matter sync. Ask whether a trust, a company and a beneficial owner each come back as their own record.
• What “integrated” means this month. Read the vendor's own page on the day you sign. A third-party roundup goes stale.
• Where the record lives if the connector stops. You should still be able to open the result without that login.
• Who is allowed to see it. Practice systems are wide. Customer due diligence files should not be browsable by everyone who can see a bill.
• Do not collect identity documents into a personal inbox. The firm emails the client a link. Staff do not ask for passport images in a side channel.

A workable pattern for a small firm

Open the matter in the system you already pay for. If the customer is a person, email them the KYC link and write the date on the job. If the customer is a company or a trust, use KYB and then deal with the people your program names. When the result returns, save it to the matter with a name a colleague can find, not “scan.pdf” on a desktop. Note who looked at a hit. That sequence does not need an API. It needs a habit. Firms that already file engagement letters this way can file a check the same way.

This page will not list which AML platforms currently sync with which practice tools. Those lists change, and a list copied from a forum is how a firm buys the wrong thing. If a vendor says they integrate, ask for the help article that shows a Karbon task, an FYI document, or an XPM job being updated by the check, and try it on a dummy matter. FreeAML's method is the email link. It does not depend on those products being connected, and it does not pretend they are.

Where this page stops

This page is the connector question. It is not the content of customer due diligence. That procedure is customer due diligence requirements in Australia.

What the client pays

On FreeAML the firm suite is A$0. The firm emails the client a link. Verification is client-pays. On the public list a personal KYC check is A$20 and a company or trust KYB check is A$40. There is no subscription. Confirm the live amounts on FreeAML pricing. FreeAML does not charge a fee to connect Xero Practice Manager, Karbon or FYI, because the check does not require that connection.

Frequently Asked Questions