VeriSanction

Due Diligence Questionnaire

Review the auto-populated data-quality metrics, edit anything your team needs to, and download a PDF or JSON artifact for your vendor-risk file. No account required. The figures are pulled from our live 12-hourly regulator-grade reporting pipeline and are reproducible from the dataset snapshot shown in the Audit Metadata.

Auto-populated

Source run: 74509776…Dataset: 20261002061001-kim

Generated 2026-10-02 13:12:21 UTC

1.Vendor Overview

Identifies the vendor entity and describes the service delivered to the requesting organization.

Legal Entity Name

Service Description

Primary Use Cases

Nature of Business Relationship

Primary Compliance Contact

2.Data Sources & Coverage

Lists the authoritative government publishers whose data is consumed, and the coverage scope the dataset provides.

Authoritative Publishers

Jurisdictions Covered

Number of CollectionsAuto-populated from latest report run.

Aggregate Entity CountAuto-populated from latest report run.

3.Data Quality Metrics

Auto-populated

Computed from the publisher's most recent bulk export and sampled during each report run. Values shown are editable but default to the latest measured figures.

Name Fill Rate (%)

Date-of-Birth Fill Rate (%)

Nationality Fill Rate (%)

Address Fill Rate (%)

Identifier Fill Rate (%)

Null Density (%)

Duplicate Rate (% of sample)

Per-Collection Metrics

Collection	Sampled Rows	Null Density Pct	Duplicate Rate Pct
OFAC SDN	20446	24.23	0.11
OFAC Consolidated	711	29.83	9.56
BIS Denied Persons	384	37.08	0.26
EU Financial Sanctions	6135	24.77	0.03
UN SC Sanctions	1005	25.18	0.1
UK HMT Sanctions	8808	40.28	18.51
Canada SEMA	5619	31.11	0.07
Australia DFAT	3899	29.77	0.05
Japan MOF	2788	34.97	0.07
Switzerland SECO	6739	28.33	0.06

Quality Controls Narrative

4.Data Recency & Update Cadence

Auto-populated

Tracks both the publisher's pipeline freshness (last successful export) and content volatility (last material change). Regulator review typically asks for both signals.

Report Generated At (UTC)

Update Frequency

Per-Collection Recency

Collection	Last Export	Last Change	Cadence	Result
OFAC SDN	2026-10-02T06:10:01	2026-10-01T18:10:01	daily	success
OFAC Consolidated	2026-10-02T06:35:01	2026-09-14T20:35:01	daily	success
BIS Denied Persons	2026-10-02T00:57:02	2026-09-28T12:53:59	daily	success
EU Financial Sanctions	2026-10-01T14:57:03	2026-09-22T18:57:01	daily	success
UN SC Sanctions	2026-10-02T04:01:02	2026-10-01T00:01:01	daily	success
UK HMT Sanctions	2026-10-02T06:40:02	2026-10-01T10:40:01	daily	success
Canada SEMA	2026-10-02T06:43:01	2026-09-28T12:54:06	daily	success
Australia DFAT	2026-10-02T06:02:01	2026-09-29T08:02:01	daily	success
Japan MOF	2026-10-02T06:38:01	2026-10-01T10:36:56	daily	success
Switzerland SECO	2026-10-02T06:09:01	2026-10-01T00:09:01	daily	success

5.Matching Methodology

Explains how identity resolution is performed.

Matching Methodology

6.Regulatory Compliance Alignment

Frameworks the service supports.

Regulatory Alignment

7.Data Security & Controls

Controls that protect the vendor platform and data.

Security Controls

Penetration Test Cadence

SOC 2 Status

8.Business Continuity & Disaster Recovery

Resilience posture.

Business Continuity Narrative

Recovery Point Objective (hours)

Recovery Time Objective (hours)

9.Subprocessors & Supply Chain

Downstream processors that touch customer or subject data.

Subprocessors

Name	Purpose	Data Categories	Residency
Google Cloud Platform	Compute, storage, secrets	All service data	us-west1 (Oregon, USA)
Stripe, Inc.	Billing + card processing	Tenant billing contact, card tokens	United States
pCloud AG	Distribution of regulator-grade artifacts	Public sanctions-dataset summaries only	Europe / United States
BetterStack	Uptime, incident, log telemetry	Operational logs (no PII)	European Union
Authoritative government publishers	Source sanctions data	Public sanctions data	Per publisher (US, EU, UK, UN, CA, AU, JP, CH)

10.Privacy, Data Protection & Data Subject Rights

Posture under GDPR, CCPA, and similar frameworks.

Privacy Narrative

GDPR Role

Data Residency

11.Incident Response & Breach Notification

How incidents are detected, triaged, and communicated.

Incident Response Narrative

Breach Notification SLA (hours)

12.Change Log & Version History

Auto-populated

Recent artifact runs and deltas. Auto-populated.

Recent Runs (last 10)

Collection	Prior	Current	Delta	Percent Change
us_ofac_sdn	38412	38412	0	0
us_ofac_cons	1256	1256	0	0
us_bis_denied	385	385	0	0
eu_fsf	8264	8264	0	0
un_sc_sanctions	1407	1407	0	0
gb_fcdo_sanctions	6998	6998	0	0
ca_dfatd_sema_sanctions	5620	5619	-1	-0.02
au_dfat_sanctions	5370	5370	0	0
jp_mof_sanctions	3902	3902	0	0
ch_seco_sanctions	9791	9791	0	0

Current Dataset Version

Audit Metadata

Identifies the dataset snapshot and methodology behind this report. The downloaded PDF includes an equivalent block.

Report Version: 1.0
Content Version: 1.3
Dataset Version: 20261002061001-kim
Dataset Hash (SHA-256): 09504538f324a9fdd39fcad56898a5ba81dc32ad78bf78a592d531393011eb41
Source Run ID: 74509776-a65d-49bf-a33a-7e07904c06fa
Generated (UTC): 2026-10-02 13:12:21 UTC
Report ID (this view): 15816573-7e84-4a1d-b7d0-0986fccdab96
Generated By: VeriSanction Data

Auto-populated

Source run: 74509776…Dataset: 20261002061001-kim

Generated 2026-10-02 13:12:21 UTC