CEMAC AML/CFT Maturity · Anti-money laundering and counter-terrorist financing framework
Your CEMAC AML/CFT framework, measured theme by theme and translated into a costed action plan.
10 themes, a 5-level scale. And the action that moves each level to the next.
The framework’s 10 themes, already written from L1 to L5. One company, one business unit, or 300 at once.
CEMAC AML/CFT Maturity · Anti-money laundering and counter-terrorist financing framework
10 themes, 5-level scale.
Nordhavn Industries
53 / 100
They measure their maturity with Datamensio
An example
This could be your situation.
Take one company as an example: three sites, three spreadsheets, no shared answer.
Nobody can consolidate.
Nordhavn Industries, 2,400 people in Hamburg, Lyon and Porto. A client asks where the group stands. Each site answers in its own spreadsheet, with its own scales.
Three weeks, a single base.
One CEMAC Regulation No. 01/CEMAC/UMAC/CM of 11 April 2016 on the prevention and suppression of money laundering, terrorist financing and proliferation financing in Central Africa, and COBAC implementing texts assessment launched across all three sites at once, from the managers’ interview notes. The framework was already written, its 10 themes and levels L1 to L5 too.
Two costs avoided before being committed.
A score of 53 out of 100, with the gap concentrated on three themes. The AI companion spotted that two actions duplicated those of another audit. The committee report took one sentence to request.
What it saved them
- 3sites measured on the same base, instead of three questionnaires to reconcile
- 2duplicate actions caught before the spend
- 1committee report, with no manual rework
These figures are an example. They could be yours.
The standard imposes processes. Datamensio says where you stand.
01
The framework is already written
Themes, questions and levels L1 to L5, all written. You do not start from an empty spreadsheet.
02
The score lands the same day
Online, by self-assessment link or in interview. Theme by theme, comparable over time.
03
The gap becomes a costed plan
Every step up carries its action. The AI prioritises on expected effect, not on the order of the standard.
04
Progress can be demonstrated
Campaign after campaign, against your target and against your own past. That is what your board asks for.
The maturity scale
One level, the next, and the action that links the two.
This mechanism (one level, a higher level, and the action linking the two) is what turns a finding into a trajectory.
Are politically exposed persons identified and subject to enhanced due diligence?
- N1
No process for identifying PEPs. Status is only spotted following an external event.
- N2
A question appears in the onboarding file, but it is filled in irregularly and triggers no specific measure.
- N3
PEPs are identified at onboarding, approval from a designated senior level is required and enhanced monitoring of transactions is applied.
- N4
Identification relies on automated screening of the stock and of flows, the source of wealth is documented and files are reviewed on a defined periodicity.
- N5
The framework is revised based on control findings, cases encountered and evolving lists, with documented tracking of revisions and indicators presented to the governing body.
Action to move from level 2 to level 3
Make PEP qualification a blocking step in the account opening circuit, designate the senior level authorised to approve onboarding, and review a sample of files at the quarterly compliance committee.
« With Datamensio, we meet our objectives far more efficiently. The ERDF inspection services and our supervising ministry particularly appreciated an approach that gives them reliable data. »
Director, CCI 94CCI Île-de-France
« We believe this is the most suitable solution to scale our transformation project and measure impact according to our needs. »
Maja SucekChief Operating Officer, Interreg Danube
Rarely on its own
Frameworks combine. Put several together to cover your business, or have the AI write yours.
Take your first measurementon AML.
What this framework covers
The CEMAC AML/CFT Regulation is the common baseline applicable to credit institutions, microfinance institutions, payment institutions, bureaux de change and other obligated entities across the six member states of the Central African Economic and Monetary Community. It requires a risk based approach: documented classification of customers, products, distribution channels and geographic areas, proportionate due diligence measures, enhanced due diligence for politically exposed persons and correspondent banking relationships, and suspicious transaction reports to the National Financial Investigation Agency. COBAC checks compliance through its on site and off site inspections.
The difficulty is not knowing the text, it is demonstrating that the framework actually works. Is the risk classification genuinely used to modulate due diligence, or does it remain an annex document revised once a year? Has the stock of customers onboarded before current procedures were introduced been remediated, and under what catch up plan? Are alerts generated by screening handled within a controlled timeframe, with a documented decision, or do they pile up for lack of resources? Many institutions have compliant written procedures and highly uneven execution across branches.
Two contextual factors weigh on priorities. First, the mutual evaluation of jurisdictions in the zone by GABAC, the regional FATF style body, which shifts attention from the text to the measured effectiveness of the framework. Second, the rise of mobile money and payment services, which widens the obligated perimeter to players whose onboarding journeys are digital and whose volumes are high. One confusion recurs often: complying with the CEMAC Regulation does not exempt an institution from the specific obligations of foreign correspondents, whose documentary requirements are frequently stricter.
Compliance control and maturity assessment do not answer the same question. Control checks whether an obligation is met and concludes with a gap or a pass. Assessment places each practice on a progressive scale and points to the precise action that moves it to the next level. For an AML/CFT framework, this distinction is decisive: a procedure exists or it does not, but its adoption across the network is measured in degrees.
In Datamensio, the framework is ready to use and adaptable. The AI adjusts the themes, questions and levels to your obligated entity profile, credit institution, microfinance institution or payment institution, or builds a variant from your own procedures and internal control reports.
Reference standard: CEMAC Regulation No. 01/CEMAC/UMAC/CM of 11 April 2016 on the prevention and suppression of money laundering, terrorist financing and proliferation financing in Central Africa, and COBAC implementing texts
The themes assessed
Framework governance
Involvement of the governing body and executive body, appointment and positioning of the compliance officer, ANIF correspondent and reporting officer, resources allocated, reporting to the board.
Risk classification
Mapping by customer, products, distribution channels and geographic areas, scoring method, review frequency, effective use to modulate due diligence.
Customer identification and knowledge
Documents collected at onboarding, beneficial owner identification, verification of the source of funds, remote onboarding, remediation of the existing customer stock.
Enhanced due diligence
Handling of politically exposed persons, correspondent banking relationships, transactions with high risk jurisdictions, thresholds and senior approval decisions.
Transaction monitoring
Detection framework for atypical transactions, scenario and threshold configuration, sanctions and list screening, alert handling and closure timeframe.
Suspicious transaction reporting
Internal escalation circuit, analysis criteria, formalisation of the decision to report or not, transmission to ANIF, confidentiality and tipping off prohibition.
Record keeping and traceability
Duration and integrity of retention of customer files and transaction records, accessibility on request, audit trail of due diligence decisions.
Training and awareness
Training plan by population, branch network coverage, adaptation to new products, assessment of learning outcomes, awareness for new joiners.
Internal control of the framework
First and second line controls, internal audit mission plan on AML/CFT, follow up on recommendations, annual report submitted to COBAC.
Outsourcing and introducing third parties
Use of intermediaries and agents, control of delegated due diligence, contractual arrangements, oversight of providers involved in onboarding.
A short version of the framework is available for the online self-assessment.
Frequently asked questions
Does this assessment constitute a certificate of compliance with COBAC?
No. Datamensio measures the maturity of your framework and prepares exchanges with the supervisor. It issues no attestation or certification. The output is a documented status report and a remediation roadmap, usable during an on site inspection or in the annual internal control report.
What is the difference between a compliance control and a maturity assessment?
Control checks whether an obligation is met and concludes with a gap. Assessment places the practice on a progressive scale and points to the action that raises it by one level. The two are complementary: assessment prepares for control, control validates.
How long does the assessment take?
The short version is completed in one working session with the compliance officer. The full version, run collaboratively with internal control, the network and operations, typically spans one to two weeks, most of the time being spent gathering evidence.
Is the framework adaptable to a microfinance or payment institution?
Yes. Questions, levels and themes can be modified, and the AI generates a variant adapted to the obligated entity profile from your procedures. A second category microfinance institution and a commercial bank do not assess the same objects to the same standard.
Can several subsidiaries in the zone be compared?
Yes. The same framework applies to each business unit and scores can be compared by theme, across entities and over time. The AI groups gaps into a consolidated roadmap, avoiding six separate initiatives on the same weakness.
How does this assessment fit with internal control and ICAAP?
The AML/CFT framework falls under internal control as defined by COBAC regulations and feeds into the assessment of operational risk and non compliance risk. Assessment findings are reused in the annual internal control report and in ICAAP work, without re entry.
Do respondents need legal expertise?
Questions focus on practices and their traceability, not on legal interpretation. A compliance officer or internal auditor can answer them. Some questions relate to information systems or the branch network: the collaborative mode allows them to be assigned to the right contributor.
Where is the data hosted?
In France, at OVH, with backup at Scaleway. No transfer outside the European Union. The AI models used can be selected, including from European solutions.