VeriSanction

Due Diligence Questionnaire

Review the auto-populated data-quality metrics, edit anything your team needs to, and download a PDF or JSON artifact for your vendor-risk file. No account required. The figures are pulled from our live 12-hourly regulator-grade reporting pipeline and are reproducible from the dataset snapshot shown in the Audit Metadata.

Auto-populated

Source run: f99a8249…Dataset: 20260811061001-kic

Generated 2026-08-11 12:35:30 UTC

1.Vendor Overview

Identifies the vendor entity and describes the service delivered to the requesting organization.

Legal Entity Name

Service Description

Primary Use Cases

Nature of Business Relationship

Primary Compliance Contact

2.Data Sources & Coverage

Lists the authoritative government publishers whose data is consumed, and the coverage scope the dataset provides.

Authoritative Publishers

Jurisdictions Covered

Number of CollectionsAuto-populated from latest report run.

Aggregate Entity CountAuto-populated from latest report run.

3.Data Quality Metrics

Auto-populated

Computed from the publisher's most recent bulk export and sampled during each report run. Values shown are editable but default to the latest measured figures.

Name Fill Rate (%)

Date-of-Birth Fill Rate (%)

Nationality Fill Rate (%)

Address Fill Rate (%)

Identifier Fill Rate (%)

Null Density (%)

Duplicate Rate (% of sample)

Per-Collection Metrics

Collection	Sampled Rows	Null Density Pct	Duplicate Rate Pct
OFAC SDN	20078	24.16	0.11
OFAC Consolidated	711	29.83	9.56
BIS Denied Persons	396	37.06	0.25
EU Financial Sanctions	6128	24.78	0.03
UN SC Sanctions	1005	25.18	0.1
UK HMT Sanctions	8758	39.94	18.38
Canada SEMA	5598	31.11	0.07
Australia DFAT	3736	29.66	0.05
Japan MOF	2804	34.96	0.11
Switzerland SECO	6745	29.39	0.06

Quality Controls Narrative

4.Data Recency & Update Cadence

Auto-populated

Tracks both the publisher's pipeline freshness (last successful export) and content volatility (last material change). Regulator review typically asks for both signals.

Report Generated At (UTC)

Update Frequency

Per-Collection Recency

Collection	Last Export	Last Change	Cadence	Result
OFAC SDN	2026-08-11T06:10:01	2026-08-07T20:10:01	daily	success
OFAC Consolidated	2026-08-11T06:35:01	2026-08-04T15:47:42	daily	success
BIS Denied Persons	2026-08-11T00:57:02	2026-08-10T00:57:02	daily	success
EU Financial Sanctions	2026-08-11T07:08:02	2026-08-05T14:57:01	daily	success
UN SC Sanctions	2026-08-11T04:01:01	2026-08-03T08:01:02	daily	success
UK HMT Sanctions	2026-08-11T06:40:02	2026-08-07T05:19:17	daily	success
Canada SEMA	2026-08-11T06:43:01	2026-08-10T15:43:01	daily	success
Australia DFAT	2026-08-11T06:02:01	2026-07-27T10:27:28	daily	success
Japan MOF	2026-08-11T06:38:01	2026-08-05T08:54:07	daily	success
Switzerland SECO	2026-08-11T06:09:01	2026-08-11T00:09:01	daily	success

5.Matching Methodology

Explains how identity resolution is performed.

Matching Methodology

6.Regulatory Compliance Alignment

Frameworks the service supports.

Regulatory Alignment

7.Data Security & Controls

Controls that protect the vendor platform and data.

Security Controls

Penetration Test Cadence

SOC 2 Status

8.Business Continuity & Disaster Recovery

Resilience posture.

Business Continuity Narrative

Recovery Point Objective (hours)

Recovery Time Objective (hours)

9.Subprocessors & Supply Chain

Downstream processors that touch customer or subject data.

Subprocessors

Name	Purpose	Data Categories	Residency
Google Cloud Platform	Compute, storage, secrets	All service data	us-west1 (Oregon, USA)
Stripe, Inc.	Billing + card processing	Tenant billing contact, card tokens	United States
pCloud AG	Distribution of regulator-grade artifacts	Public sanctions-dataset summaries only	Europe / United States
BetterStack	Uptime, incident, log telemetry	Operational logs (no PII)	European Union
Authoritative government publishers	Source sanctions data	Public sanctions data	Per publisher (US, EU, UK, UN, CA, AU, JP, CH)

10.Privacy, Data Protection & Data Subject Rights

Posture under GDPR, CCPA, and similar frameworks.

Privacy Narrative

GDPR Role

Data Residency

11.Incident Response & Breach Notification

How incidents are detected, triaged, and communicated.

Incident Response Narrative

Breach Notification SLA (hours)

12.Change Log & Version History

Auto-populated

Recent artifact runs and deltas. Auto-populated.

Recent Runs (last 10)

Collection	Prior	Current	Delta	Percent Change
us_ofac_sdn	37806	37806	0	0
us_ofac_cons	1255	1255	0	0
us_bis_denied	423	423	0	0
eu_fsf	8245	8245	0	0
un_sc_sanctions	1407	1407	0	0
gb_fcdo_sanctions	6967	6967	0	0
ca_dfatd_sema_sanctions	5598	5598	0	0
au_dfat_sanctions	5168	5168	0	0
jp_mof_sanctions	3931	3931	0	0
ch_seco_sanctions	8916	9021	105	1.18

Current Dataset Version

Audit Metadata

Identifies the dataset snapshot and methodology behind this report. The downloaded PDF includes an equivalent block.

Report Version: 1.0
Content Version: 1.3
Dataset Version: 20260811061001-kic
Dataset Hash (SHA-256): 95e205cbe5ea86443f640d52a3b8a0c26de64fcc3a08989a69b98e2b15c83eec
Source Run ID: f99a8249-d27a-434b-901b-d3752bdec39a
Generated (UTC): 2026-08-11 12:35:30 UTC
Report ID (this view): c98db89a-6884-4937-827e-fc64868a3976
Generated By: VeriSanction Data

Auto-populated

Source run: f99a8249…Dataset: 20260811061001-kic

Generated 2026-08-11 12:35:30 UTC