First-run setup wizard

The 3-step card that appears on the dashboard of a brand-new firm. Takes a fresh firm from 0% compliance health to ~60% in 30 seconds with no typing.

When you see it

• Compliance health is below 30%
• You haven't dismissed it for this firm before
• You're using the same browser (dismissal is per-browser)

It disappears automatically once your compliance health crosses 30%.

The three actions

1. Appoint me as MLRO

Records you as the firm's nominated officer. POCA s.330 requires every firm to have a named MLRO to receive internal SARs. The notes on the appointment flag it as auto-appointed via the wizard, so you can transfer to another partner later in Settings → AML Compliance → MLRO Appointment.

2. Publish starter PCP (v1)

Publishes a 20-section Policies, Controls and Procedures document pre-filled with starter text. Edit each section in Settings → AML Compliance → Policies, Controls & Procedures to reflect your firm's actual procedures. The starter text is general guidance, not legal advice, and your MLRO must review it.

The starter text is written for the accountancy sector guidance (AMLGAS, July 2026). If you are a law firm, it is labelled as written for accountancy guidance: review every section against the LSAG guidance before you rely on it.

The EDD section states your firm's EDD threshold. It is filled in from the threshold in your risk settings whenever the policy is shown or printed.

Each version you publish records the firm-wide risk assessment it rests on: your latest signed assessment at the moment you publish. The policy page and the PDF show "Based on the firm-wide risk assessment signed on" that date.

When the starter template is updated for new guidance, firms whose policy was published against the older template see a "review and republish" notice on the policy page, with a list of what changed. Your published policy is never changed for you. When you publish a new version, your own text is kept, new sections are added with starter text, and Use starter text swaps any single section to the updated wording.

3. Log my AML induction

Records that you completed AML induction training today, with a 12-month expiry. Doesn't include other staff yet; add them later in Settings → AML Compliance → Staff AML Training Register.

What if I dismiss it by mistake?

The dismissal is stored in your browser's local storage. Clear that to bring it back, or just open Settings → AML Compliance and do the same steps manually; the wizard isn't doing anything you can't do from there.

What if my compliance health drops back below 30%?

The wizard is one-time per dismissal: once you've dismissed it (or all three actions complete), it stays gone for this browser even if your score regresses later.