Investment focusCompliance, testing and certificationAML, whistleblowing, fire safety
Compliance, testing and certification · Hand over money laundering officer mandates

AML, whistleblowing systems and fire safety: add-ons to a compliance platform

The reporting channel under the Whistleblower Protection Act (HinSchG) is set up, the fire safety rules are posted. But who tracks the deadlines when something actually happens?

We buy external money laundering officers, ombudsperson offices under HinSchG and fire safety officers only as an add-on to occupational safety or data protection platforms.

Confidential. Only the three partners see your enquiry.
Last updated: September 23, 2026 · +49 40 89741812
Fire safety officer inspecting a commercial building
AI-generated image
Confidential from the first minute
Does this sound familiar?

Two situations we know

Money laundering officer for 120 brokers and dealers

Annual flat fees, recurring, small. You want to hand your mandates to a platform that offers more.

Ombudsperson office as an add-on

You run reporting channels for 200 companies alongside data protection. Both should transfer together.

Your day-to-day, as we know it

This is what happens in your business before anyone talks about succession

Seven days, three months

Under HinSchG, receipt must be confirmed within seven days. Feedback follows no later than three months.

GwG risk analysis

The risk analysis must be current. Many businesses still have the version from when it was introduced.

Suspicious activity report in goAML

A suspicious case must go to the FIU via goAML. That rarely happens, and then nobody remembers how it works.

Fire safety rules parts A, B, C

Under DIN 14096, each target group has its own part. After a renovation, part B is no longer correct, and nobody notices.

Anti-money laundering training for entities obliged under the Anti-Money Laundering Act
AI-generated image
How we measure your company

The metrics we look at in the first call

We look at the numbers you use to run your business yourself. The right column shows our acquisition criterion.

MetricWhat it tells usOur benchmark
Ongoing mandates per serviceShows whether the business works as an add-on to the core mandate.For us only as an add-on.
Share of clients with a core mandateShows whether the service is tied to existing client relationships.Good if mostly tied.
Reports received per yearShows the actual workload behind the flat fee.With deadlines met.
Flat fee versus individual effortShows whether cases are billed in addition.Clear rule in the contract.
Qualified officersShows whether the service depends on one person.Deputy arrangement in place.
What actually changes after the acquisition

Step by step

We automate the desk work. Professional decisions and customer contact stay with your people.

TodayConfirm receipt of reports and track deadlines
With GTPConfirmation and deadline tracking run automatically. Assessing the report stays with the reporting office.
TodayUpdate the GwG risk analysis
With GTPThe draft is built from the client structure and the previous year. The money laundering officer assesses the risks.
TodayCheck KYC documents
With GTPIDs and transparency register extracts are checked for completeness. The officer does the classification.
TodayUpdate the fire safety rules after a renovation
With GTPChanges to parts A, B and C are prepared. The fire safety officer checks on site.
Your systems stay in use:goAMLTransparency registerEQS Integrity Line
AI potential in the segment

How much desk work can really be automated here

This is GTP's assessment. We show it upfront so you can see what we will work with after the acquisition.

01

Risk analysis from client data

A model drafts the anti-money laundering risk analysis from client structure, products and regions.

02

Prepare reporting documentation

The case file is summarized automatically, so the officer only checks and approves the suspicious activity report.

03

Training production for mandatory topics

Training on money laundering, whistleblower protection and fire safety is produced per client by a text generator.

What limits the technology here

Whistleblower reports require confidentiality of identity, suspicious activity reports remain the officer's decision, and fire safety inspections take place on site.

What this means for you

Check how much your client base overlaps with data protection or occupational safety. That decides the fit.

Sources BaFin: supplementary interpretation and application guidance on the Anti-Money Laundering Act (2025). Federal Statistical Office: 26% of companies use AI, 23% of those with 10 to 49 employees (2025).

What we want to see

The documents we need

After the first call and the non-disclosure agreement, these five documents are enough for a solid offer.

  • List of mandates with flat fee and linked core mandate
  • Template contracts for the reporting channel, money laundering officer and fire safety officer
  • Anonymized case statistics of the reporting channel with deadline compliance
  • Qualification certificates of the fire safety officers
  • Deputy arrangement and liability insurance cover
What we buy

Our acquisition profile for this segment

Criteria

  • Only as an add-on to an existing GTP platform
  • Mandates with annual contracts
  • No law firm structure
  • Documented case handling

Value drivers

  • Client base matches data protection or occupational safety
  • goAML registration and processes in place
  • Ombudsperson in your own team

Value reducers

  • Mandates that often need legal advice
  • Annual contracts with short notice periods
  • Case files only on paper
How you can tell we know your business

Three facts you can quote

  1. 0198,810 obliged entities are registered with the FIU, only 4,059 filed a report in 2024 (FIU annual report 2024 via KPMG).
  2. 02External money laundering officers cost €2,000 to €15,000 per year (CIVAC 2026).
  3. 03103,333 legal units with 50 or more employees must operate an internal reporting channel (Destatis 2024).
Market range, third-party source

What comparable companies trade at in the market

Size classEBITDA multiple
Micro-cap, revenue below €5m
The relevant class for most succession cases in this segment
3.5x to 5.5x
Small-cap, revenue €5m to €50m5.0x to 7.0x

Category business services (B2B). Source: DUB KMU-Multiples Q2/2026. The DUB figures show asking prices and price expectations on a business marketplace. They do not include completed transactions. The range comes from an independent third party and is not an offer from GTP.

From multiple to cash

The multiple gives the enterprise value. What reaches your account depends on four items:

Net financial debt
Loans, leases and shareholder accounts are deducted, cash is added.
Working capital
We assume a normal level. An account emptied before the sale reduces the price.
Investment backlog
Vehicles, measuring equipment and software due in the next two years are deducted from the price.
Payment structure
Part of the price is paid only after signing, through a rollover or a performance-based component.
What lowers the value

If one of these points applies, the value drops:

  • The owner personally holds the key customers
  • Short remaining terms or contracts that can be terminated at any time
  • If a large share of revenue depends on one customer, the price goes down.
  • No second management level that runs the business without the owner

We calculate your value in the first call using your numbers. We go through the four items openly with you, even if the result is below your expectations.

All market data and the regulatory timeline for compliance, testing and certification

Frequently asked questions

What owners in this segment ask

Will you buy my AML officer business on its own?

No. As an add-on to a data protection or occupational safety platform with a matching client base, yes.

What about law firms?

We do not buy law firms. Officer service providers without legal advice, yes.

What do you automate?

Risk analyses, training records, reporting documentation.

How does it work?

First call, check of fit with a platform, then an offer.

More questions about the sale and the process

Dr. Sebastian Herfurth, Partner at Generation Tech Partners
Why we buy this segment
Your clients have obligations to meet, and your business makes sure they do. We buy businesses that do this reliably. Professional responsibility stays with the people who carry it today.

I am responsible for the purchase agreement and the handover. For businesses that need a license or accreditation, the deal structure decides whether the approval survives the change of ownership.

For M&A advisors, tax advisors and succession advisors

Response on your client usually within 72 hours

Acquisition profile, teaser metrics and our commitments for all 24 segments are on a separate page. We only approach your client through you.

Our team, the process at a glance, press and common questions about selling are on our main site.

First step

Talk to a buyer who knows your segment

A 30-minute call is enough to know whether we fit. Afterwards you get a written assessment with reasons.

Request a confidential first call

Or call us: +49 40 89741812

ConfidentialOnly the three partners see your enquiry. An NDA is possible in advance on request. We share nothing with third parties.
Back
Request a confidential first call