02-header-1100x578

How Accru made AML risk assessment consistent and traceable.

Accru has a demanding promise: to serve as a full-scale back-office compliance operation for auditing and accounting firms across Sweden, Norway, Denmark, the UK, and France. Compliance isn't a feeling. It's a system. Accru built one.

When Therese joined as Head of Risk and Compliance in September 2024, she arrived with fifteen years as an authorized auditor at KPMG and a stint leading work at FAR, the Swedish industry organization for auditors and accounting consultants. She knew exactly what the industry needed. She also knew it didn't exist yet.

The problem everyone knew but nobody had solved

AML regulation is clear on paper: the general risk assessment, conducted per legal entity, must form the basis for customer-level risk classification. In theory, logical. In practice, the two parts lived in entirely separate places. The general risk assessment sat in a drawer. Customer classification was handled manually and inconsistently, with no system connecting it back to the general risk assessment.

The consequences were predictable: sanctions from supervisory authorities. Auditors and accounting firms struggling to prove why a client was classified as low risk. Assessments that varied depending on who happened to be at the keyboard that day. Therese;

"When I went to market two years ago, we hadn't found a system that came close to matching what we needed.”

A three-party procurement, not two

Therese began by bringing in consultants from NFR Group. A deliberate move: having technical and methodological expertise in the room that wasn't already too close to the problem. Together, they evaluated the market.

"Verified said they could solve this, build something that adapted to our model, rather than asking us to adapt to theirs."

Therese Andersson, Head of Risk and Compliance at Accru

That wasn't a minor detail, it was the entire point. Connecting the general risk assessment to the customer-level workflow is what turns the regulation from a document into something you can actually run a business on.

Working together with NFR Group and Verified, Accru built a model based on twenty parameters. Those parameters are loaded into Verified and configured per agency. The system asks the questions and the staff member answers. The risk classification becomes the output of a consistent, documented model - not a one-off judgment call.

Therese calls it a flagged trail. You go from A to B to C, all the way through. You know where you are, you know what's required, and when you're done, you know you did it right.Therese;

"It gives the person doing the assessment a clear, consistent path to follow"

"Thinking the system is the solution on its own, that would be the wrong conclusion. It's the combination of rigorous work on the underlying assessment, paired with a system that guides you through it."

That's more than an efficiency gain – it's an objectivity gain. Given the same answers from the client, you and I arrive at the same classification, no more, no less. Traceability that holds up under scrutiny. Supervisory authorities had long been skeptical of "low risk" labels they couldn't see the reasoning behind. The four-tier scale, up from three under the old approach, lets Accru show that reasoning.

The pilot: it works

Since February 2026, Accru has rolled out to eight agencies, starting with an initial pilot of five. The feedback is consistent: the flow is smooth, clients understand what's happening and why, and staff feel more confident than before. That confidence is hard to quantify. It's easy to understand. Staff no longer have to second-guess the KYCs they run - did I do it right, did I answer everything, is this enough. That's the difference between hoping nothing slipped through and having a system that helps you show, step by step, that it didn't.

Accru is now extending the rollout beyond these eight agencies. AMLR is incoming, raising the bar further. The methodology, the model, the system, all of it is already in place.

Therese is clear about what it took to get here: time, persistence, the right partners, and a decision not to take the shortcut;

"This is the work that needs to be done. It's not simple, and it's demanding, but it's what's required."

 

 

 

More Insights