Table of Contents
Good record keeping for denied party screening is what turns a screening check into proof. When a regulator asks how you cleared a customer or a shipment, your records are the answer. Without them, you have a claim. With them, you have evidence. This guide covers what to keep, how long, in what form, and why the audit trail is your best defense.
Screening happens in seconds. A record can last for years. The value of denied party screening only holds up if you can show what you did, when, and against which lists. If you cannot reproduce a past check, you cannot prove it happened. So the record matters as much as the check.
Why the record is your defense
Regulators do not watch you screen in real time. They review your files after the fact. If a party you dealt with later turns up on a list, the question is simple. Did you screen them at the time, against the right lists, and act on the result? Your records answer that question. A clean, complete file shows good faith and a working process.
A missing record looks like a missing control. Even if you did screen, you cannot prove it. That gap can turn a defensible situation into a finding. This is why the audit trail sits at the centre of any screening program. It is the difference between “we check everyone” and “here is exactly what we checked.”
What to keep for each screening
Each screening event should produce a small, complete record. The goal is to let someone recreate the check months or years later. Capture enough detail that the outcome is not in doubt. Keep these fields for every screening you run.
- The name and details of the party you screened, as they were entered.
- The date and time of the check.
- Which lists were searched, with the list version or refresh date.
- The screening tool or method used.
- The result: clear, potential match, or confirmed match.
- Who ran the check and, where relevant, who reviewed it.
The list version matters more than people expect. Lists change often. A “clear” result today means little unless you can show which version of the list you cleared against. If you use the consolidated screening list or sources like the OFAC SDN list, note the date the data was pulled.
Records for a potential match
Clear results are easy. Potential matches need more care. When a name flags, the real work is the review. Your record must show how you decided the flag was a false positive or a real hit. That reasoning is what protects you later.
What the review record should show
- The original alert and the listed party it matched.
- The data points you compared: name, address, date of birth, country, ID numbers.
- Your conclusion and the reason for it.
- Any supporting documents you relied on.
- The name of the reviewer and the date of the decision.
Handling a false positive well is a documentation task as much as a judgment call. A short written reason beats a vague memory. If the same name flags again next month, your past note saves time and keeps decisions consistent.
How long to keep records
Retention rules vary by country and by the type of transaction. Many trade and export rules ask you to keep records for several years after the transaction closes. In the United States, export records are commonly kept for five years. Some regimes ask for more. Check the rules that apply to your business and your goods.
A safe habit is to set one retention period that meets the longest rule you face. Then apply it across the board. The table below shows a simple way to think about it.
| Record type | Typical minimum period | Notes |
|---|---|---|
| Screening results for a shipment | Five years after the transaction | Tie the record to the export or sale it supports. |
| Match review decisions | Same as the transaction | Keep the reasoning, not just the outcome. |
| Ongoing customer screening | While active, plus the retention period | Re-screening dates should be logged too. |
| Policy and procedure versions | Life of the program | Show what your rules were at any past date. |
Do not forget policy history. If you are asked why a check was done a certain way in 2023, you need the procedure that was live then. Keep dated versions of your screening policy and your list sources.
In what form to keep records
Form matters as much as content. A record you cannot find is a record you do not have. Store screening results where they are searchable and safe. A screenshot buried in an email chain will not help you under pressure.
- Keep records in a system, not in scattered inboxes.
- Make them searchable by party name, date, and transaction.
- Protect them from edits after the fact, so the trail stays trustworthy.
- Back them up, and test that you can restore them.
- Store the underlying data, not just a pass or fail flag.
Software helps here. An automated screening tool usually logs each check with a timestamp and list version. That built-in log is a strong audit trail. Manual checks work too, but you must record the same fields by hand, every time, without gaps.
Build record keeping into your process
The best records are a by-product of a good routine, not an extra chore. If screening and logging happen in one step, nothing gets missed. Follow a few habits and the audit trail builds itself.
- Screen at set trigger points, such as onboarding and before shipment.
- Log the result at the moment of the check, not later.
- Record the reason for any match decision in plain words.
- Re-screen on a schedule and log each pass.
- Review the file structure once a year to keep it clean.
These steps line up with wider denied party screening best practices. Deciding how often to run a check is its own topic. Our guide on screening frequency covers the trigger points in more detail. Consistent screening plus consistent records is the whole game.
Frequently Asked Questions
Do I need to keep records if the screening result was clear?
Yes. A clear result is still evidence that you checked. Keep the party, date, lists, and outcome. Without it, you cannot prove the check ever happened.
Are screenshots enough as a record?
A screenshot can help, but on its own it is weak. It often lacks the list version and can be lost or edited. A logged record in a proper system is far stronger.
Who should be able to access the screening records?
Your compliance staff and auditors need access. Limit editing rights so the trail stays trustworthy. Reading and exporting should be easy for the people who may face a regulator’s question.
Key Takeaways
Record keeping is not paperwork for its own sake. It is the proof that your screening works. Capture the party, date, lists, list version, and outcome for every check. Write down the reasoning behind each match decision. Keep records for as long as your rules demand, in a system you can search and trust. Do this well and your audit trail becomes a defense, not a gap. If you want help setting up a record keeping process that stands up to review, contact us and we will point you in the right direction.