What is EU sanctions screening?
EU sanctions screening checks customers, counterparties and payments against the EU's consolidated list of people and organisations under financial sanctions. The EU calls sanctions "restrictive measures": the Council of the EU adopts them under the Common Foreign and Security Policy (CFSP), and Council regulations make them binding in every Member State. A confirmed match means the party's assets must be frozen.
Which EU sanctions list does the API screen against?
The EU Consolidated Financial Sanctions List (FSF), published by the European Commission. It covers every person, group and entity under an EU asset freeze across all sanctions programs, including UN Security Council designations once the EU adopts them. New UN listings appear early under the transitional UNLI code. Measures without an asset freeze, such as travel bans and sector-wide trade restrictions, aren't in the FSF. The EU Sanctions Map describes those.
How often is the EU sanctions list updated?
The Commission updates the list whenever the Council adopts new listings, amendments or delistings, with no fixed schedule. New listings usually apply from the day they are published in the Official Journal of the EU, so we check for changes every 15 minutes. Every response states the list version it used: the file date, our download time and the file's SHA-256 hash.
Who has to comply with EU sanctions?
EU sanctions apply within EU territory, to EU nationals anywhere in the world, to companies incorporated in a Member State, inside or outside the EU, and to any business done in whole or in part in the EU. Banks, payment and e-money institutions, crypto-asset service providers, lenders, insurers and exporters routinely screen. Each Member State sets its own penalties, and Directive (EU) 2024/1226 makes violating EU sanctions a criminal offence across the EU.
What should I do when the API returns an EU match?
The API returns a match score, not a verdict, so first confirm the identity by comparing date of birth, nationality and ID numbers with the list entry. If the match is confirmed, freeze the party's funds and economic resources, make none available to them, and report to your national competent authority. Under the Russia regime (Regulation 269/2014), frozen assets must be reported within two weeks. If you can't resolve whether it's the same person, EU guidance says to contact the competent authority.
Does the EU asset freeze cover companies owned by listed persons?
In principle, yes. The freeze also reaches entities a listed person owns or controls. EU guidance treats ownership as holding 50% or more of an entity, and control can exist below that, for example through the right to appoint the board. The API matches the names the EU publishes, so an unlisted subsidiary won't match on its own. Screen the company's beneficial owners (UBOs) too, and treat a match on an owner as a red flag for the company.
How does the API handle name variations and transliteration?
Many EU-listed names are transliterated from Cyrillic or Arabic and are spelled several ways. The API fuzzy-matches each name against the primary name and all aliases in the EU file, so common spelling variants still match, and every match comes with a score and the reasons behind it. Add date of birth, nationality or ID numbers to help separate true matches from false positives, and set min_score to choose what counts as a match.
How does the API handle personal data under GDPR?
Screening means sending names and personal data, so the less your provider keeps, the less risk you carry. We use the names and attributes you submit only to run the check and never store them, in line with GDPR's data minimisation principle. Each response returns your own subject_ref, so you can link results to your records without sharing more than the check needs.
Can I screen EU and other sanctions lists in one request?
Yes. Use the sources option to choose the lists each request checks: the EU list alone, or together with the UN Security Council Consolidated List, OFAC's SDN and Consolidated lists, the UK Sanctions List, and the Canadian, Swiss and Australian lists. Each list in the response carries its own version details, so your audit trail shows exactly what was checked.
How fast is the API, and can I try it for free?
Average response time is about 200 ms, fast enough to screen during onboarding or before a payment is released. The batch endpoint screens up to 50 subjects per request, which suits re-screening your customer base after a list update. One screening is one subject, new accounts get 100 free screenings, and paid plans start at $149 a month.