What drives the cost of AML compliance for a small Irish firm

"What does AML compliance actually cost?" is the question every small Irish firm asks and almost nobody answers honestly. The honest answer is that there is no single number - the cost is driven by a handful of variables specific to your firm, and most of them are at least partly within your control.

Understanding those drivers matters more than usual right now. From 10 July 2027 the AMLR - Regulation (EU) 2024/1624 - replaces the rulebook Irish designated persons have worked under since the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010, which means a one-off transition cost on top of the running cost. And supervision is intensifying: Ireland launched a National Risk Assessment and a 30-point AML/CFT Action Plan on 18 June 2026, and the AMLCU's administrative financial sanctions regime has been in force since 30 June 2026 under S.I. No. 307 of 2026. Here are the variables that actually move the number.

Driver 1: how many clients you take on, and how often

AML cost scales with onboarding events more than with revenue. A conveyancing practice opening hundreds of matters a year does far more CDD than a corporate advisor with a dozen long-standing retainers, even at similar fee income. Each onboarding carries identification and verification, beneficial-ownership analysis, screening, risk-rating and recording.

There are also hard per-client outlays. Verifying identity electronically has a per-check cost with most providers. For corporate clients, obtaining the required extract from the Register of Beneficial Ownership at rbo.gov.ie costs a flat 2.50 euro per extract - small individually, but a real line item across a busy year, and a duty you cannot skip.

Driver 2: the risk mix of your client base

Fifty local, face-to-face, straightforward clients cost far less to manage than fifty files featuring non-residents, layered corporate structures, remote onboarding or higher-risk services. Every enhanced due diligence trigger - a politically exposed person, a high-risk third-country connection, or from July 2027 the AMLR's high-net-worth test (handling assets of 5 million euro or more for a client whose total wealth is 50 million euro or more) - multiplies the work on that file: source-of-funds and source-of-wealth evidence, senior approval, closer monitoring.

This is a genuine commercial lever. Some firms consciously price higher-risk work to reflect its compliance load; others decline categories of work whose margins do not survive the diligence they require. Either is better than absorbing the cost invisibly.

Driver 3: manual process versus tooling

The largest hidden cost in most small firms is partner and staff time spent doing compliance manually - chasing documents by email, photocopying passports, keeping the risk register in a spreadsheet, reconstructing files before an inspection. Tooling converts unpredictable hours into a predictable subscription: electronic identity verification, automated sanctions and PEP screening, and a system that keeps the file complete as you go.

The trap to avoid is duplication - paying for overlapping tools, or running a tool and a parallel paper process "just in case". Pick a workflow, evidence it in one place, and retire the shadow copies.

Driver 4: the people cost - MLRO, training and reviews

Someone in your firm is the MLRO and compliance officer, and their hours are a real cost even when unbilled. The AMLR's prescribed roles - a board-level compliance manager plus a compliance officer of sufficiently high standing, who also takes on targeted financial sanctions implementation from 10 July 2027 - formalise time your firm is already spending informally.

Add recurring items: documented training for everyone client-facing (at least annually, in practice), the annual business-wide risk assessment review, and periodic client file reviews. None is individually large; together they are the steady-state cost of a programme that works.

Driver 5: transition and remediation - the 2027 spike

Between now and 10 July 2027 there is a one-off cost most budgets have not caught yet: refreshing the BWRA against the AMLR, rewriting policies built on old thresholds (15,000 euro becomes 10,000 euro for occasional transactions, with a 3,000 euro occasional-cash trigger and a 10,000 euro cash cap), designating the new compliance roles, and remediating legacy client files that would not stand up under the new rulebook. Spread over twelve months this is manageable; compressed into the final quarter it is expensive and risky.

The cost nobody budgets: getting it wrong

Without inventing figures - and you should be sceptical of anyone who quotes you scary numbers - the direction of travel is plain. Administrative sanctions now exist for AMLCU-supervised sectors and enforcement attention is rising across all supervisors under the Action Plan. The costliest AML programme is the one that fails an inspection: remediation under supervisory scrutiny, professional time, and reputational damage in a small market. Steady, evidenced compliance is cheaper than any of that.

What to do now

• Count last year's onboarding events - that number, not turnover, is your base cost driver.
• Segment your client book by risk and identify how many files genuinely carry enhanced-diligence load.
• Tally what you currently spend: subscriptions, per-check fees, RBO extracts, and an honest estimate of staff hours.
• Kill duplication: one verification route, one screening route, one place where the file lives.
• Budget the AMLR transition - BWRA refresh, policy rewrite, file remediation - across 2026-27 rather than leaving it to mid-2027.
• Price or decline work whose compliance load you cannot recover.

Where CompliDesk fits

CompliDesk Ireland is built and priced for small Irish firms: one subscription covering verification workflows, screening, RBO evidence and the compliance records that drive most of your hidden hours. See exactly what it costs on the pricing page.