AML fails audits when evidence lives in email threads and shared drives.
Attach the check, the risk assessment and the review date to the client record itself, and set a recurring review task.
The goal is that any partner can answer 'show me the evidence' in under thirty seconds.