FAQs
Everything you need to know, in one place.
From Tranche 2 obligations to document security and onboarding, here are clear answers to the questions professional services firms ask us most. If something's still unclear, our team is one message away.
Frequently Asked Questions
How Chekbox Works
What Does Chekbox Do?
Chekbox is a compliance and data security platform designed specifically for professional services firms, lawyers, accountants, agents, and brokers.
We transform high-risk, manual client onboarding and document management into a secure, automated digital workflow.
In short, Chekbox allows your firm to:
Secure Client Identity:
Conduct robust, auditable identity verification that fully complies with AML/CTF, ATO, and ARNECC standards, keeping your firm Tranche 2 ready.
Guarantee Document Integrity:
Securely store all sensitive client files. Every document receives a unique digital fingerprint, a Hash ID, allowing us to instantly validate the file and detect if even a single character has been changed.
Automate Compliance and Onboarding:
Eliminate manual data entry with smart forms and auto-population, and manage secure e-signatures and official digital document certifications, improving efficiency and reducing error rates.
We provide the security and regulatory certainty your firm needs to operate with real confidence.
Tranche 2 & Compliance
How Do I Make Sure My Firm's Documents Are Compliant?
Chekbox supports document compliance through three connected, automated layers:
Identity Verification and Documentation:
Using our system to verify client identity automatically generates a verified audit trail confirming the process met AML/CTF, ARNECC, and ATO standards.
Document Integrity (Hash ID):
When a document is stored or signed, we generate a unique digital fingerprint, a Hash ID, that lets you confirm at any time that the document's content is authentic and unchanged.
Auditable Chain of Custody:
Every document interaction, upload, signature, certification, or view, is logged in a permanent, time-stamped audit record, giving you clear evidence for any internal or external audit.
In short, Chekbox shifts compliance from manual checklist management to an automated, auditable digital workflow.
When is the Tranche 2 deadline?
Tranche 2 obligations, covering lawyers, accountants, real estate professionals, and other newly regulated services, started on 1 July 2026.
AUSTRAC registration is due within 28 days of providing a designated service, closing 29 July 2026 for most firms already offering these services.
Chekbox is built to get your firm compliant with these obligations now, not to leave you working through AUSTRAC enrolment alone
What does my firm need to do to be ready for Tranche 2?
To comply with the AML/CTF Tranche 2 requirements commencing July 1, 2026, your firm must transition from its current practices to a formal, risk-based AML/CTF Program. This involves several critical steps:
Required Compliance Steps
- Enrol with AUSTRAC: If your firm provides a "designated service," you must enrol with AUSTRAC as a Reporting Entity. Enrollment opens from March 31, 2026.
- Conduct a Risk Assessment: You must formally assess and document the money laundering and terrorism financing (ML/TF) risks specific to your business, your clients, and the services you provide.
- Develop an AML/CTF Program: You must create and maintain a written, Board/Senior Management-approved AML/CTF Program tailored to your risk assessment. This includes establishing policies for Customer Due Diligence (CDD) and record-keeping.
- Appoint an AML/CTF Compliance Officer: A fit and proper person at the management level must be designated to oversee compliance and liaise with AUSTRAC.
- Strengthen CDD and Ongoing Monitoring: You must implement robust processes for initial identity verification (KYC), Enhanced Customer Due Diligence (ECDD) for high-risk clients, and ongoing monitoring of client relationships.
- Staff Training and Reporting: All relevant staff must receive ongoing training on AML/CTF obligations, and you must establish systems for mandatory reporting (e.g., Suspicious Matter Reports) to AUSTRAC.
How Chekbox Makes You Tranche 2 Ready
Chekbox is your technology solution for managing the most time-consuming and high-risk elements of the new regime:
- Automated CDD: Our system automates the necessary initial and ongoing customer due diligence, providing certified verification records that satisfy AUSTRAC requirements.
- Audit-Ready Records: We provide the secure, centralised, and immutable record-keeping required for all verification and client data for the mandated period.
- Reduced Risk: By providing a compliant platform for identity verification, document integrity (Hash ID), and secure record management, we significantly reduce your firm's exposure to ML/TF risk and demonstrate a commitment to compliance.
Start preparing now. Chekbox is the proactive step your firm can take today to ensure a seamless transition to the Tranche 2 regime.
Is Chekbox compliant with Australian AML/CTF requirements?
Absolutely. Our Identity Verification system ensures full compliance with AUSTRAC's AML/CTF requirements for Customer Due Diligence (CDD) and record-keeping. We also meet standards required by the Australian Taxation Office (ATO) and ARNECC (for conveyancing/property).
Document Security & Signing
How do I ensure the person signing a document is actually who they claim to be?
This is Signer Identity Verification, available as an add-on to any signature when you need proof of exactly who signed, not something included in every unlimited signature by default.
How do I use Chekbox to ensure a document has not been tampered with?
Chekbox uses a patented process that combines cryptographic hashing with the immutability of the blockchain to provide Tamper-Proof Validation down to the pixel level.
The process is simple and is performed automatically whenever you need to rely on a document:
- The Digital Fingerprint is Created (Lock)
- The moment a document is uploaded or signed, the system instantly generates a unique cryptographic hash (Digital Fingerprint) that is mathematically tied to every single character and pixel in that file.
- This Hash ID is then securely registered on the blockchain, creating an unalterable, time-stamped record of the file's original, authentic state.
- The Document is Validated (Key)
- To verify a document, you select the "Validate" function in Chekbox.
- The system instantly calculates a new hash for the document's current state.
- It then compares this new hash against the original Hash ID stored on the blockchain.
- The Integrity Proof
- If the hashes match: The document is 100% authentic, and you receive an Audit Certificate confirming its integrity.
- If the hashes do not match: This means the document has been altered—even if by a single pixel or character—and the system flags it immediately as compromised, eliminating the risk of accidental or fraudulent use.
This process provides your firm with proof of document authenticity, eliminating the risk of fraud and liability.
How do I ensure the person signing a document is actually who they claim to be?
This is a critical function known as Signer Identity Verification. Our eIDAS-compliant process uses a multi-layered approach to provide the strongest possible identity assurance, significantly reducing your fraud risk and increasing the legal defensibility of the signature.
Our Layered Identity Verification Process
- Identity Matching: The signing process is intrinsically linked to the initial Client Identity Verification step. The signer must first prove their identity using verified documents (like passports or driver's licenses) against AML/CTF standards.
- 2 Factor Authentication (2FA): Access to the signing session is secured with a second factor (such as a unique code sent to the signer's verified mobile phone or email) to ensure possession of the verified credentials.
- Digital Certificate Creation: Once authenticated, a unique digital certificate is issued to the signer for that specific document. This certificate cryptographically binds their verified identity to the electronic signature data, proving they were the one who signed the document.
- Audit Trail Evidence: Every step—from the initial verification to the final signature click—is logged in a permanent, time-stamped Audit Trail, recording the signer's IP address, the time of action, and the method of authentication.
This combination of AML-standard identity proofing and eIDAS-compliant cryptographic linking ensures that the electronic signature has the highest legal weight and confidence regarding the signer's true identity.
What happens to a document's security once it's signed?
Documents signed using our eIDAS-compliant process are highly secure. You have the option to register the executed document's digital fingerprint onto the blockchain. This creates an immutable, unalterable record of the signed agreement, ensuring permanent proof of execution and eliminating future disputes about the document's content.
Can Chekbox detect if a document has been edited?
Yes. Our Tamper-Proof Validation feature detects even the smallest change—down to a single pixel—by comparing the document's current hash against the hash recorded on the immutable blockchain ledger. If the hashes don't match, the document is flagged as compromised.
What is the legal validity of your e-signatures and certifications?
Our electronic signatures are built for legal recognition in Australia. For matters that need it, identity verification can be added to a signature too, so it's tied to a confirmed person, not just an email address.
Platform, Integrations & Support
Is Chekbox a cloud-based solution, and how does that affect accessibility?
Yes, Chekbox is a secure, cloud-based platform. This allows qualified staff to securely access and manage documents from anywhere, on any device (desktop, tablet, or mobile), with their permissions fully controlled. This flexibility is essential for modern, hybrid professional workforces.
Can Chekbox integrate with my existing practice management or CRM software?
We understand the need for seamless workflows. Chekbox is designed with robust integration capabilities and APIs to connect with popular practice management systems (PMS) and Customer Relationship Management (CRM) tools. This ensures client data flows effortlessly, maximising your investment in existing software.
What kind of training and support is available for my team?
We provide comprehensive support and training to ensure rapid adoption and success. This includes dedicated implementation assistance and direct access to our customer service team via phone and email. Our goal is to ensure your team is proficient quickly, minimising disruption and maximizing ROI.
Onboarding
How long does it take to onboard a new client using the system?
Our Automated Onboarding & Smart Forms feature significantly reduces intake time. Because data from ID verification and client forms is automatically populated into the client file, firms typically see a reduction of 75% or more in manual entry time, speeding up client engagement from days to minutes.
Do we have to design our own client forms?
You can use our standard compliance templates or create fully customised questionnaires tailored to your specific practice area. Our smart forms ensure you collect the necessary, relevant data, improving efficiency and client experience.
Pricing & Billing
What is the contract length for Chekbox, and are there hidden fees?
There's no lock-in contract with Chekbox. Plans are billed monthly, so your firm can scale up, scale down, or adjust as your needs change.
Pricing is straightforward: your monthly plan covers your core usage, with clear limits shown upfront on the pricing page, no hidden charges.