Table of Contents
Knowing how to screen a new vendor protects your business before money or data changes hands. A vendor is not the same as a goods supplier. Vendors sell you services. Think contractors, freight agents, consultants, and IT providers. These people often touch your systems, your customers, and your money. That is why a quick background check matters.
This guide walks you through vendor screening step by step. You will learn what to collect, how to check the owners, and how to keep records. It sits inside the wider practice of denied party screening, which every trading business should run.
Why vendor screening is different
A goods supplier ships you products. You screen them, but the risk is mostly in the goods and the destination. A service vendor is closer to your business. They may hold admin rights on your network. They may sign contracts on your behalf. They may move funds through your accounts.
Screening customers is also different. You check customers to make sure you can lawfully sell to them. With a vendor, you check that you can lawfully pay them and trust them with access. The list checks look similar. The context does not. To see how the terms differ, read our note on restricted party screening versus denied party screening.
What to collect before you engage
Ask for the basics in writing. Do not rely on a phone call or a website. You want a paper trail you can check and keep.
- Full legal name of the company and any trading names.
- Registration number and country of incorporation.
- Registered address and main operating address.
- Names of owners, directors, and any parent company.
- Bank details and the name on the account.
- A main contact, with email and phone.
For IT and data vendors, ask for more. Get their security certifications. Ask where they store data. Ask who their subcontractors are. A vendor that hires other vendors passes their risk to you.
Screen the company and its owners
Run the legal name through the sanctions and denied party lists. Do not stop at the company. Screen the owners and directors too. A clean company can hide a listed owner. If you are new to the process, our guide on how to do denied party screening covers the basics.
Which lists to check
Start with the main US lists, then add local ones for your region. These are the ones most vendors need checked.
| List | What it catches |
|---|---|
| OFAC SDN List | Sanctioned people and firms you cannot deal with. |
| BIS Entity List | Parties with export restrictions. |
| Consolidated Screening List | Many US lists in one search. |
Watch the ownership too. If a listed person owns half or more of a vendor, the vendor is treated as listed. This is the 50 percent rule. It catches firms that look clean on the surface.
Handle hits and false positives
Common names throw up matches that are not real. A hit is not proof. It is a flag to check. Compare the address, the country, and the date of birth where you have it. If the details do not line up, it is likely a false positive.
Never clear a hit from memory. Write down why you cleared it. Keep the screenshot. If a real match appears, stop the engagement and get advice. Watch for sanctions evasion red flags too, like a vendor that refuses to name its owners or asks to be paid through a third country.
Document everything
Screening only helps if you can prove you did it. Keep a simple record for each vendor. A regulator or an auditor may ask for it years later.
- The name you screened and the date.
- The lists you checked.
- The result, clean or hit.
- How you cleared any hit.
- Who did the check and who approved it.
This is your audit trail. Store it where more than one person can reach it. Do not keep it only in one inbox.
Keep screening after you sign
A vendor that is clean today can be listed tomorrow. Screening once is not enough. Re-run your active vendors on a set schedule. For guidance on timing, see how often you should run denied party screening. Build the check into your onboarding and your ongoing reviews. Good habits here are part of wider denied party screening best practice.
Frequently Asked Questions
Do I need to screen a small local vendor?
Yes. Size and location do not remove the risk. A small vendor can still have a listed owner. Screening takes minutes and keeps you safe. See our notes on screening for small business.
Can I outsource vendor screening?
You can. Many firms use a tool or a provider. You still own the result. Read whether trade compliance can be outsourced before you decide.
What if a vendor uses subcontractors?
Screen them too where you can. Ask the vendor to name them. A subcontractor with access to your data carries the same risk as the vendor itself.
Key Takeaways
Screening a new vendor is simple once you have a routine. Collect the legal details in writing. Check the company and its owners against the lists. Clear false positives with care and write down your reasons. Keep records, and screen again on a schedule. Vendors touch your systems and your money, so the effort pays off. If you want help setting up a vendor screening process, contact our team.