Everything Australian Mortgage Brokers and Aggregators Need to Know About Compliance

Under the National Consumer Credit Protection Act 2009, aggregators holding an Australian Credit Licence must have adequate arrangements to supervise the conduct of all credit representatives operating under their licence. This is a continuous, documented obligation — not an annual checkbox or a policy statement. ASIC expects ACL holders to demonstrate their supervision arrangements at any time, including during surveillance activities and regulatory reviews.

In practice, adequate supervision requires documented supervision frameworks, regular competency verification, monitoring of credit activities, internal dispute resolution processes and evidence of ongoing oversight at the individual credit representative level. For aggregators managing networks of dozens or hundreds of brokers, this cannot be achieved through email, spreadsheets or shared drives without creating significant evidence gaps.

CompliCentral provides the infrastructure that makes credit representative supervision manageable and evidenceable at network scale. The Registers module maintains structured, live compliance registers for all credit representatives. Compliance Automation triggers supervision workflows based on configurable rules and compliance status changes. The Auditing module records structured supervision reviews with findings and outcomes. Checklists ensure supervision activities follow a consistent, documented process for every broker in the network. Every action is timestamped and permanently stored — so when ASIC requests evidence of your supervision arrangements, the answer is a structured, complete record from the platform, not a manually assembled file built under pressure.

ASIC's Best Interests Duty has applied to mortgage brokers since January 2021. It requires brokers to act in the best interests of consumers and, where a conflict exists, prioritise the consumer's interests over their own or their aggregator's. For ACL holders, this means having systems in place to monitor, support and evidence BID compliance across the entire broker network — not simply issuing a policy and relying on individual broker adherence.

CompliCentral supports aggregator-level BID compliance through three primary capabilities. The Auditing module enables structured, documented file audits that assess BID compliance at the loan and broker level — recording findings, remediation requirements and outcomes in a timestamped, auditable record. The Checklists module embeds BID assessment steps into broker workflows, ensuring the required process is followed at the point of the loan assessment rather than reviewed retrospectively. Compliance Automation triggers BID-related review workflows based on configurable rules — flagging activity patterns that require compliance manager attention before they become a regulatory issue.

The result is a continuous, evidenced BID compliance process that ASIC can review at any time — not a file assembled under pressure when a surveillance activity is announced. Aggregators who rely on policy documents alone to demonstrate BID compliance are not in a defensible position. Aggregators who use CompliCentral have a structured, auditable record of every relevant compliance activity for every broker in their network.

CompliCentral's Accreditations module centralises the management of every broker's accreditation position across all lenders on their panel and all industry body memberships. For aggregators, this means a network-wide view of every broker's accreditation status — by broker, by lender and by accreditation type — updated in real time without manual data consolidation or spreadsheet reconciliation.

For individual brokers, the platform provides a single view of their complete accreditation position across all lenders, CPD progress against MFAA or FBAA requirements and any outstanding compliance actions — all accessible without logging into multiple systems or requesting status updates from their aggregator.

The platform tracks accreditation status, manages supporting documentation, records a complete accreditation history for each broker and triggers automated alerts through Compliance Automation when any accreditation is approaching expiry. When a broker does not action an alert within the required window, escalation workflows notify the aggregator compliance manager automatically — creating a documented, timestamped compliance event record rather than relying on manual follow-up or individual memory. Nothing lapses through a missed email.

Managing accreditation status across a broker network is one of the most operationally complex obligations aggregators face. Every broker on the panel maintains individual accreditations across multiple lenders, each with its own requirements and compliance cycles. Every broker must meet MFAA or FBAA CPD obligations tied to membership standing. And the aggregator must be able to demonstrate oversight of all of it at any time — not just at the end of the year when a membership audit is due.

CompliCentral provides aggregators with a network-wide accreditation dashboard that shows the complete accreditation and CPD status of every broker in the network in real time — by broker, by lender, by accreditation type and by compliance status. Traffic-light indicators show whether each accreditation is current, expiring soon or expired, across the entire panel simultaneously.

This eliminates the manual consolidation, phone follow-up and monthly reconciliation spreadsheets that most aggregator compliance teams currently use to build a picture of network accreditation health. The dashboard reflects live data — updated automatically as statuses change, as alerts are triggered and as compliance actions are completed — giving compliance managers an always-current view of the network's accreditation position without any manual effort. The aggregator sees across the network. The broker sees their own position. One platform, one source of truth.

The Mortgage & Finance Association of Australia requires members to complete a minimum of 30 CPD hours per year, including a mandatory minimum of structured CPD. The Finance Brokers Association of Australia has equivalent requirements. Aggregators are responsible for ensuring their broker members meet these obligations and for maintaining the records that evidence compliance during membership audits and regulatory reviews.

CompliCentral's Accreditations module centralises CPD tracking across the entire broker network, connecting each broker's CPD completion record to their broader compliance position — including lender accreditation status, supervision records and audit outcomes — rather than holding it in isolation in a separate training platform. Automated alerts through Compliance Automation notify the relevant compliance manager when any broker's CPD completion is tracking behind the annual requirement, before a gap becomes a membership compliance issue.

For individual brokers, the platform provides a single view of CPD progress against MFAA or FBAA requirements at any point in the year — without needing to total up completions from multiple sources or request a report from their aggregator. For aggregators, it provides a network-wide CPD compliance picture by broker and by industry body requirement — replacing the annual manual reconciliation that currently absorbs significant compliance team capacity at the end of each CPD year.

The MFAA and FBAA both require new-to-industry brokers to complete a structured mentoring program under a qualified, experienced mentor before operating independently under an ACL. Aggregators are responsible for managing these programs, tracking every milestone, documenting every supervision activity and producing the auditable completion record that industry bodies and ASIC require. This is not an optional administrative process — it is a documented compliance obligation with consequences if the records cannot be produced.

CompliCentral's Mentor Management module is the only purpose-built system in the market for managing mandatory new-to-industry mentoring programs at aggregator network scale. The module manages mentor assignments — connecting each new broker to their designated mentor with a timestamped record of the assignment and any changes. Supervision milestones are tracked within the platform, with each mentoring activity, session log and sign-off recorded against the program framework in real time as it occurs.

Aggregator compliance managers see the current mentoring status and milestone completion of every new broker in the network from a single dashboard — without relying on email updates or spreadsheet maintenance. When a new broker completes the required program, CompliCentral produces the auditable completion record required by the MFAA, FBAA or ASIC — permanently stored, timestamped and accessible at any time. No manual file assembly, no documentation gaps and no uncertainty about whether the record meets the standard required.

CompliCentral is built around the specific regulatory obligations that apply to Australian mortgage brokers and aggregators operating under an Australian Credit Licence — not the broader financial services regulatory framework that applies to financial advisers or other licence types.

The platform supports compliance with the National Consumer Credit Protection Act 2009, which establishes the credit representative supervision obligations that every ACL holder must continuously meet and evidence. ASIC's Best Interests Duty, in effect since January 2021, requires mortgage brokers to act in the best interests of consumers and prioritise the consumer's interests when a conflict exists — CompliCentral supports BID compliance through its Auditing, Compliance Automation and Checklists modules.

The platform also supports obligations under ASIC Regulatory Guide 205, which covers credit licensing requirements for credit licensees and credit representatives. Regulatory Guide 206, which establishes training and competence requirements that aggregators must ensure credit representatives meet. Regulatory Guide 209, which sets responsible lending conduct obligations. Regulatory Guide 271, which requires ACL holders to maintain an effective internal dispute resolution process with documented complaints handling and a maintained complaints register.

MFAA and FBAA CPD obligations — including the annual 30-hour CPD requirement for MFAA members — are tracked through the Accreditations module. Data handling obligations under the Privacy Act 1988 and the Australian Privacy Principles are supported through CompliCentral's contract management, registers and isolated single-tenant data architecture.

Yes. CompliCentral integrates with the CRM and broker management systems used by Australian mortgage aggregators and brokers — connecting compliance data to your existing technology infrastructure rather than requiring it to be managed in an isolated silo separate from your operational systems.

The CompliCentral Integrations module supports connections to major CRM platforms, document management systems and broker management tools used in the Australian mortgage broking industry. The platform's E-Sign capability handles digital document execution natively — covering contracts, compliance declarations, audit sign-offs and all activation documentation without dependency on a separate e-signature service. CRM Integration keeps your existing CRM current with live compliance status data for every active broker, so compliance information and operational information stay aligned without manual data re-entry.

Contact the CompliCentral team to discuss your specific integration requirements and confirm compatibility with your current technology stack.

CompliCentral provides structured implementation support from day one — including network assessment and configuration, broker data migration, platform configuration to your workflows and compliance obligations, and team onboarding for your compliance managers, operations staff and broker-facing team. Implementation sessions are role-specific — your compliance team, your operations staff and your brokers are each onboarded to the view and functions relevant to their role rather than receiving a generic platform walkthrough.

The platform includes structured Induction workflows that guide new brokers through required orientation steps before they are activated in the network — with completion tracking, knowledge confirmation and sign-off built into the workflow. The Accreditations module tracks CPD completion status across the network, connecting training records to each broker's broader compliance position rather than holding them in isolation.

Our support team provides ongoing assistance as your network grows and as your regulatory obligations evolve — including as ASIC requirements, MFAA and FBAA standards and ACL supervision expectations change over time. Access to the CompliCentral support team is available through direct contact, and platform documentation is maintained and updated to reflect current regulatory requirements.

CompliCentral's Compliance Automation module continuously monitors the accreditation and CPD status of every broker across the network — triggering automated alerts and escalation workflows before any accreditation expires. Alert thresholds are configurable, with notifications sent at 90, 60 and 30 days before expiry for any accreditation type or lender requirement. Alerts are delivered to the relevant broker and to the aggregator compliance manager, so expiry risk is visible at both levels of the network simultaneously.

When a broker does not action an expiry alert within the required window, CompliCentral escalates the notification to the aggregator compliance manager automatically — creating a documented, timestamped compliance event record rather than relying on individual memory or manual follow-up. The compliance team focuses on the exceptions and escalations, not on tracking and chasing across the entire broker panel.

For aggregators, this means the network-wide accreditation position is always visible and always current — with automated monitoring removing the manual overhead that currently consumes compliance team capacity in aggregator businesses that depend on spreadsheets and email to manage expiry across a large broker panel.

CompliCentral's pricing is modular and scales with the size of your broker network and the lifecycle stages and modules your organisation requires. Rather than applying a one-size-fits-all price across every aggregator and every use case, the platform is configured and priced to match your specific structure — whether you are an individual broker, a boutique aggregation group beginning to formalise your compliance infrastructure, or a large national broker network managing hundreds of credit representatives under an ACL.

To get a pricing discussion that accurately reflects your network size, your compliance obligations and the modules you want to implement, contact the CompliCentral team directly. Our team will walk through the available options and provide a configuration that matches your actual requirements rather than a standard package that includes capabilities you do not need and excludes ones you do.