It's tempting to view AML compliance training purely as a defensive expense — something firms do to avoid regulatory trouble. That framing understates the business case considerably.
Institutional clients — banks, large corporates, private equity funds — increasingly run vendor due diligence on the law firms they engage, precisely because they carry their own regulatory exposure to who they work with. A firm that can produce a clear compliance framework, document its client due diligence process, and demonstrate ongoing staff training is simply easier to onboard as outside counsel. A firm that cannot is a friction point in every new engagement, regardless of the quality of its legal work.
There is also a talent dimension. Younger lawyers, particularly those trained internationally or working with multinational clients, expect a firm to have basic compliance infrastructure. Its absence signals an operational gap that affects recruitment and retention as much as it affects regulatory risk.
Finally, there is the direct cost of getting this wrong after the fact. Reconstructing a compliance history during an active investigation — trying to demonstrate, retroactively, that due diligence was performed — is vastly more expensive and less credible than having contemporaneous records from the outset. Firms that invest in structured training and documentation now are not spending money defensively; they are building an operational asset that speeds up client onboarding, reduces the cost of any future inquiry, and signals professionalism to the market.
The practical starting point is modest: a certification programme for partners and compliance officers, a documented due diligence checklist, and a clear escalation path. None of this requires restructuring the firm. It requires deciding that compliance is part of how the firm operates, not an afterthought bolted on when a regulator asks.