What is an audit trail in compliance screening?
The screening ran, the analyst remembers dismissing the candidate, and nothing on file says why. An audit trail closes that gap: the chronological record of what was screened, when, against which sources, what came back, who reviewed it and what they decided.
Record-keeping is an obligation in its own right under FATF Recommendation 11 and the EU framework, and it is what turns a control into evidence. The failure mode is familiar to anyone who has sat through a supervisory visit, and it is never that the screening did not run. An audit trail is also an internal quality tool, because it is the only way to see how consistently a team applies its own thresholds.
What this workflow covers
SCOPE- Write the inputs, sources and list versions, the candidates returned, the reviewer, the timestamp, the disposition and the reasoning to a record that cannot be changed silently.
- A supervisor asking why a payment to a Cyprus company was released in 2024 wants the two candidates raised and the identifiers that excluded them.
- Systems that keep only confirmed matches lose the more important record: what was reviewed and dismissed, and on what grounds.
- Screening history here keeps every past check with its matches and its dismissed candidates, so the dismissal survives alongside the result.
- This is a decision record, not a system event log or a case management note.
Compliance glossary
TERMS- Record retention
- The obligation to keep due diligence and transaction records for a defined period after the relationship or transaction ends.
- Four-eyes review
- A control requiring a second reviewer to confirm a decision, commonly applied to true matches and to escalations.
Authoritative references
SOURCES- 01The FATF Recommendations — Recommendation 11 (Record keeping)
Financial Action Task Force
- 02Regulation (EU) 2024/1624 — record-keeping obligations
EUR-Lex, Official Journal of the European Union
- 03A Framework for OFAC Compliance Commitments
U.S. Department of the Treasury — OFAC
Frequently asked questions
Q&A- What has to be in the trail?
- The name and identifiers screened, the date and time, the lists and versions checked, every candidate returned, the reviewer's identity, the disposition, the reasoning, and any escalation or approval. Dismissed candidates matter as much as confirmed matches, and are the part most often missing.
- How long do we keep it?
- Commonly five years after the end of the business relationship or after an occasional transaction, subject to national rules that may extend it. Check the applicable national implementation rather than assuming one period covers your whole footprint.
- Does the trail have to be immutable?
- It has to be reliable. Protect records from silent modification, and where a correction is needed record it as a new entry with its own timestamp and author instead of overwriting the original.