Self-service policy foundations — BSA/AML and compliance management — drafted by a former Chief Compliance Officer from programs that passed real examinations. Instant download. Editable Word. A fraction of a law firm invoice.
Every document is a practitioner-drafted template in editable Word format — bracketed placeholders, a built-in drafting guide, and margin notes that explain the judgment calls. Watermarked to your license at delivery.
Product, geography, customer, and channel risk scored against a defensible methodology. The document examiners ask for first.
The master compliance program document. Governance, roles, escalation, SAR workflow, training, independent testing. The anchor of your entire suite.
Customer identification, beneficial ownership, sanctions and PEP screening, EDD triggers. Tailored for retail, institutional, or mixed models.
Typology-based rules, thresholds, alert disposition, and escalation. Built to map against the monitoring stack you actually use.
Third-party due diligence, tiering, ongoing monitoring, termination. What bank partners and examiners check after the BSA program.
Account takeover, first-party fraud, synthetic identity, and a recordkeeping policy that maps to §1010.410 and state retention rules.
The umbrella framework: the four CMS components, compliance officer authority, board oversight, and how the pieces fit together.
Enterprise-wide regulatory inventory and product-by-product risk scoring with a defensible rating methodology — the CMS counterpart to your AML risk assessment.
Ongoing monitoring and independent testing: cadences, risk-based sampling, severity classification, and quarterly reporting.
Centralized intake, severity classification, root cause analysis, remediation, and closure validation for compliance issues and control gaps.
Role-based curriculum, delivery and frequency, attestation tracking, and recordkeeping across federal consumer financial laws.
Audit scope and frequency, auditor independence and selection, finding classification, and remediation tracking on the record.
Bank partner asking for your AML program? Start there. Building the compliance management system an examiner will test? Start with CMS. Both are practitioner-built template packs — instant download, editable Word, watermarked to your license. Most companies eventually adopt both.
Pay by card or ACH. Your watermarked Word package is ready to download on the confirmation page immediately.
Work through each document's built-in drafting guide: replace the bracketed placeholders, pick your variants, delete what doesn't apply.
Tune severity scales, escalation timelines, and product lists to your operation — the margin notes explain each judgment call.
Final pass by your counsel, board approval, and your program is in force. Questions along the way? [email protected].
No, and it's not trying to be. Complyable gives you a defensible, examiner-ready policy foundation at a fraction of the cost of a law firm engagement. For sign-off on novel products, enforcement response, or litigation, you still need outside counsel — every pack's drafting guide says so explicitly.
The packs support money transmitters, crypto exchanges and custodians, BaaS-stacked fintechs, neobanks, payments companies, and sports betting / iGaming operators. If your model sits outside those, email [email protected] and we'll tell you straight whether the templates fit.
The AML Foundation is your BSA/AML program — risk assessment, KYC, transaction monitoring, the documents a bank partner or AML examiner asks for first. The CMS Foundation is the management framework around your whole compliance program — governance, compliance risk assessment, monitoring and testing, issues management, training, and independent audit. They're complementary, and they cross-reference each other. Start with the one being asked of you now.
Templates are point-in-time documents — no auto-updates are included in the purchase. When the regulatory framework changes materially, updated editions are released. If you want ongoing monitoring of FinCEN, OFAC, state MTL, and bank partner expectations, email [email protected] — maintenance arrangements are available through D Spack Consulting.
That's a different engagement — custom drafting, with a practitioner's name behind it, scoped to your business. It's handled separately through D Spack Consulting LLC (mutual NDA standard before any scoping discussion). Email [email protected] with a sentence or two about your situation.
Two foundations, clear scope, practitioner-built. Instant download, watermarked to your license.