Skip to content
Security & privacy

Privacy boundaries built into the product

AML/CTF work is sensitive. Lex-AML is structured so each audience only sees what it should — your team in the Organisation Workspace, and each customer only their own submission.

By design

What protects your information

Organisation Workspace

Your organisation’s staff work here, and your organisation manages who has access — with time-limited invitations, one-time codes and session timeouts to help keep accounts secure. Authentication and multi-factor sign-in are supported and configurable. Your team makes every customer due diligence decision; the platform never decides for you.

Customer Portal

Kept apart from the Organisation Workspace, with a separate sign-in. Each customer sees only their own submission, in plain language — never another customer’s information or your internal workspace. The portal collects information; your organisation decides.

Organisation boundaries

Each organisation’s records are handled within organisation-specific data boundaries. GetPost Labs processes limited operational metadata to run, monitor, secure and support the platform, and access to organisation and customer records, where technically available, is restricted to authorised operational, security, support or legal purposes — controlled and logged. Your compliance records are not used for unrelated marketing purposes.

Audit trail and retention

Important actions are recorded in your Organisation Workspace audit trail, so the activity and decision history stay together for later review. Lex-AML supports organised record keeping, including 7-year retention settings where configured; align them with your organisation’s policy, legal obligations and service agreement.

Identity and screening providers

Lex-AML can support Document Verification Service (DVS) identity verification — the Commonwealth service published as IDMatch — and Australian PEP checks where configured for an organisation. These checks depend on provider setup, credentials and release configuration. Your team remains responsible for reviewing results and recording decisions.

Website analytics

On this website, Google Analytics loads only after you accept analytics cookies. Separately, we count page views and clicks without cookies, recording no IP address, name, email or form content.

For how we handle personal information, see our Privacy Policy.

Lex-AML supports compliance workflows and record keeping. It does not provide legal advice, does not guarantee compliance, and does not replace professional judgement or advice from a qualified AML/CTF adviser or legal professional.

Questions about data handling?

Request demo access and we’ll walk through exactly how your data is separated, stored and audited.

Request demo access