Platform

What is regulatory reporting software?

Regulatory reporting software produces the reports an institution owes its regulators from the data it already holds, instead of having staff rebuild them in spreadsheets and Word documents each period. For AML/CFT that means suspicious transaction reports and currency transaction reports to the financial intelligence unit; for prudential and conduct supervision it means the periodic returns each sector regulator requires. The software also tracks what is due, when it was filed and what evidence supported it.

ERMAML, the Ontech Risk & Compliance Suite, drafts STRs and CTRs in the goAML schema used by Zambia's Financial Intelligence Centre directly from case data, keeps a filing calendar with SLA alerts for returns to regulators such as the Bank of Zambia, PIA, SEC, ZICTA and NAPSA, and prepares those returns from the live risk, compliance and customer registers, developed by Ontech Solutions in Lusaka.

Key capabilities

goAML STR and CTR drafting

Reports generated in the goAML XML schema from case and customer data, with taxpayer numbers populated from registry verification, ready for review and submission through the institution's goAML account.

Filing calendar

Every recurring obligation to every regulator on one calendar, with owners, due dates and SLA breach alerts as deadlines approach.

Return preparation

Prudential, solvency, contribution and quality-of-service returns aggregated from the live registers into the regulator's layout.

Submission tracking

Filed, pending and overdue status per obligation, with the submitted artefact and evidence retained.

Audit pack export

One-click export of the evidence behind a filing for an examiner or internal audit.

Executive pack

Board-level summaries of filings, breaches and open findings produced from the same data.

How it works

  1. Obligations to each regulator are registered with their frequency, owner and required evidence.
  2. Cases that meet the reporting standard are drafted as STRs or CTRs in the goAML schema.
  3. The compliance officer reviews the draft, corrects it if needed, and submits it through goAML; the filing is recorded.
  4. Periodic returns are assembled from the live registers into the regulator's format ahead of the due date.
  5. The filing calendar escalates approaching and missed deadlines to the accountable owner.
  6. Submitted reports and their supporting evidence are retained for inspection.

Benefits

Reports built from the record

An STR drafted from the case file cannot drift from the evidence the way a re-typed report can.

No forgotten deadlines

Every obligation to every regulator is on one calendar with escalation.

Less quarter-end rebuilding

Returns are prepared from live data rather than reconstructed from spreadsheets each period.

Evidence at hand

The artefact submitted and the data behind it are retained together for the examiner.

Who it is for

  • Compliance officers and MLROs who file with the Financial Intelligence Centre.
  • Finance and regulatory reporting teams preparing returns for sector regulators.
  • Multi-branch institutions consolidating branch data into corporate returns.
  • Boards and audit committees that want visibility of filing status.

Zambia-specific considerations

Reporting entities in Zambia submit STRs and CTRs to the Financial Intelligence Centre through the goAML platform, the UNODC-developed system the FIC uses to receive reports. Drafting reports in the goAML schema, rather than in a document that is later transcribed, removes a common source of rejected or delayed filings.

Beyond the FIC, a Zambian institution may owe returns to the Bank of Zambia, the Pensions and Insurance Authority, the Securities and Exchange Commission, ZICTA, NAPSA, NHIMA or its sector regulator, each on its own cycle. A shared filing calendar is the simplest way to see all of them in one place.

How ERMAML addresses this

goAML-ready from the case file

ERMAML drafts STRs and CTRs in the goAML schema from the case and customer record, including taxpayer numbers taken from ZRA verification, so the report matches the evidence.

One calendar for every regulator

Obligations to the FIC and to sector regulators sit on the same filing calendar with owners, SLA alerts and submission tracking.

Returns from live registers

Prudential, contribution and quality-of-service returns are aggregated from the registers the institution already maintains in the platform, and the evidence is exported as an audit pack.

Frequently asked questions

What is goAML?

goAML is reporting and analysis software developed by the United Nations Office on Drugs and Crime for financial intelligence units. Zambia's Financial Intelligence Centre uses it to receive suspicious transaction reports and currency transaction reports from reporting entities, which submit through their goAML accounts.

Does ERMAML submit STRs automatically?

No. ERMAML drafts the STR or CTR in the goAML schema from case data. The institution's compliance officer reviews the draft and submits it through the institution's own goAML account, so a person remains accountable for every filing and the submission is recorded in ERMAML.

Which regulators' returns can it prepare?

The filing calendar and return preparation cover obligations the institution registers, including returns to the Bank of Zambia, the Pensions and Insurance Authority, the Securities and Exchange Commission, ZICTA and NAPSA. The specific returns depend on the institution's licence and are configured during implementation.

How does the filing calendar work?

Each obligation is registered with its regulator, frequency, owner and required evidence. The calendar shows what is due, alerts the owner as the deadline approaches, escalates when an SLA is breached, and records the submitted artefact when the filing is made.

Can we export evidence for an examination?

Yes. An audit pack export gathers the filed reports, the underlying case or register data and the audit trail entries behind them into one package for an examiner or internal auditor.

Sources

See ERMAML on your own data

Request a demo with Ontech Solutions in Lusaka and see sanctions screening, KYC, transaction monitoring, goAML reporting and the risk register working together in one platform.

Last updated 2026-09-13. Published by Ontech Solutions, Lusaka, Zambia.