Podcasts
Watch videos featuring supply chain experts
A multinational manufacturer runs restricted party screening well in its home market. Its regional business units, however, each grew their own version of the process: one uses a spreadsheet checked quarterly, another relies on a regional freight partner's screening as sufficient, and a third screens only new customers, not existing ones. No single team can say with confidence what the company's actual screening coverage looks like across its full footprint.
This is the pattern that separates single-entity screening from enterprise-scale screening. The individual steps (identify parties, check lists, resolve matches) don't change. What changes is the coordination problem: multiple legal entities, multiple jurisdictions, multiple systems, and multiple teams that were never designed to work from the same playbook.
This article is general compliance guidance, not legal advice. Programs should be tailored to each organization's actual risk profile and confirmed with trade counsel.
A single-entity company mainly needs a correct process. A global enterprise needs a correct process that survives being run by dozens of teams, in different languages, against different regulatory baselines, without drifting into inconsistent local variations. The U.S. Treasury's Office of Foreign Assets Control (OFAC) captures this directly in its 2019 Framework for OFAC Compliance Commitments, which identifies five components of an effective sanctions compliance program: management commitment, risk assessment, internal controls, testing and auditing, and training. That framework is written for exactly this coordination challenge, and it applies well beyond U.S.-headquartered companies given how often global supply chains touch U.S. persons, goods, or the U.S. financial system.
Enterprises don't need one team manually clearing every transaction worldwide. They need one governance function that sets the policy, defines what "screened" means, approves the list coverage for each jurisdiction, and owns the escalation path when a true match appears. Regional and business-unit teams can execute day to day, but the standard they're executing against should not vary by region unless the underlying legal exposure genuinely differs.
Not every counterparty carries the same risk, and OFAC's guidance explicitly encourages risk-based programs rather than uniform ones. A practical tiering approach:
| Risk tier | Example | Screening depth |
|---|---|---|
| Low | Long-standing domestic customer, low-risk market | Standard name screening, periodic re-screen |
| Medium | New international counterparty, moderate-risk jurisdiction | Name screening plus basic ownership check |
| High | Complex ownership, high-risk jurisdiction, export-controlled goods | Full name, ownership/UBO tracing, and enhanced due diligence |
The risk tiering itself needs documentation. Auditors and regulators want to see the reasoning, not just the outcome.
At enterprise scale, ownership complexity is not the exception, it's routine: joint ventures, holding companies, and multi-layer supplier structures are common. Under OFAC's "50 Percent Rule," an entity is treated as blocked if sanctioned parties own 50% or more of it, individually or in aggregate, even if that entity is never named on a list. Enterprises with complex supplier and customer networks need ownership and UBO tracing built into the program, not treated as a one-off investigation. This is a distinct capability from basic list screening, which is why Trademo separates Sanctions & PEP Screening from Sanctions Control & Ownership Screening and UBO Screening.
A company operating across dozens of countries needs coverage aligned to where it, its goods, and its counterparties actually touch, not just its headquarters jurisdiction. U.S. sanctions and export control lists (OFAC's SDN List, the BIS Entity List, Denied Persons List, and Unverified List) sit under different legal authorities than the EU Consolidated List or the UK Sanctions List, and each carries different consequences for a match. With regulatory content spanning 140+ countries, Trademo's Global Trade Content is built for exactly this kind of multi-jurisdiction mapping, which is difficult to maintain manually as regulations shift.
Government lists change frequently, sometimes daily. A counterparty cleared last year is not guaranteed to be clear today. Enterprises should re-screen existing relationships on a defined cadence and monitor for list changes in between, rather than relying solely on onboarding checks.
Every match, cleared or escalated, needs a documented reason: what identifying details ruled it in or out, who made the call, and when. This is what makes a program defensible in an OFAC enforcement review or an internal audit, and it's one of the "root causes" OFAC has cited when compliance programs break down.
Screening failures often originate outside the compliance team: a sales rep who adds a new distributor without triggering onboarding screening, or a logistics coordinator who reroutes a shipment through a new consignee. Training on when screening is required, not just how to run it, needs to reach procurement, sales, and logistics staff, not only compliance analysts.
Testing and auditing is one of OFAC's five essential components for a reason: a program can look correct on paper and still have gaps in execution. Periodic internal testing, including deliberately checking whether known scenarios are actually caught, helps surface those gaps before a regulator does.
None of these practices work as a one-time project. They function as an operating model: centralized policy, risk-based depth, ownership tracing, jurisdiction-aligned list coverage, continuous monitoring, documented decisions, trained frontline staff, and periodic testing. Trademo's Global Trade Management platform supports several of these components directly, through sanctions, PEP, ownership, and UBO screening backed by regulatory content across 140+ countries, but the governance and training elements remain organizational commitments no software replaces.
Most enterprise screening failures don't come from a single bad decision. They come from inconsistency: one region screening thoroughly while another treats it as a formality. Closing that gap takes governance and training as much as it takes technology, but the two work best together.