OFAC & restricted-party visitor screening for federal contractors
Screen visitors against OFAC, BIS, UN, EU, and UK lists in a single check at the front desk, built for federal contractor, ITAR/EAR, and CUI-handling facility visitor workflows, with a complete audit trail for every decision. Education and trade screening use the same engine.
Lists Covered
OFAC · BIS · UN · EU · UK, all in one automated check.
Fuzzy Name Matching
Scores spelling variations, not just exact matches. A person decides every possible match.
Audit-Ready by Default
Every decision logged with who checked, when, and what was found.
Defense & Manufacturing
Screen visitors at check-in before granting facility access. Supports ITAR, EAR, CMMC, and DFARS visitor control programs.
Education & Private Schools
Screen tuition payors, families, sponsors, and faculty. Upload enrollment rosters via CSV for batch screening, with re-screening on a schedule you set.
Visitor Screening
Multi-list sanctions check with AI matching
Try a sample screening:
Click a sample name above to see the screening in action
Interactive demo • Non-functional preview of SecurePoint USA screening
How Screening Works
Multi-List Coverage in One Check
OFAC SDN, BIS Entity List, UN Consolidated, EU Sanctions, and UK Sanctions: screened simultaneously at check-in. Ownership analysis under OFAC's 50 Percent Rule runs on entities through the screening API, not on individual visitors.
Fuzzy Name Matching
Spelling variations and partial matches are scored with fuzzy matching against a configurable threshold, rather than requiring an exact match. A person decides every possible match.
Append-Only Screening Audit Trail
Every screening is logged with timestamps, the exact lists checked, match results, and the final decision, linked to a stable record ID for consistent auditability.
Scheduled Rescreening
Workforce and vendor rosters are rescreened on a schedule, and a screening that ran while a list was unavailable is rerun once the list recovers. A new possible match goes to review.
Unlimited Screenings
No per-check fees on any plan. Screen every visitor, student, tuition payor, and vendor without skipping checks to manage costs.
Human-in-the-Loop Decisions
When AI analysis is on, an AI-written summary of the screened name appears beside the match evidence. Authorized reviewers decide every possible match, and each decision is logged.
Export-Ready Evidence Packs
Pull complete screening history by visitor, date, or status. Export records with all match context an auditor needs. No email threads, no spreadsheet reconstruction.
What a possible match looks like
Nothing passes silently. A possible match is held here until an authorized reviewer records a decision, and both the decision and its reasoning go to the audit trail.
Read the transcript
Visitors are screened against lists like OFAC's SDN list, the BIS Entity List, and the UN, UK and EU sanctions lists.
When a name comes back as a possible match to someone on a list, the visit is held. No badge can print until a person reviews it.
The case goes to the compliance queue, which shows how long each review has been waiting.
Open it to see exactly what matched: the listed name, the list it's on, and how closely the names compare.
Compare that with what you know about the visitor. Then record your decision and the reason: not a match, approve, deny, or send it for senior review.
The decision is saved with who made it and when, and the visit can continue.
SecurePoint Visitor. Screen visitors at check-in, and keep the decisions on record.
Lists Screened on Every Check
A single screening request checks all major global sanctions regimes simultaneously. No separate API calls, no missed lists, no additional per-list fees.
OFAC SDN
Specially Designated Nationals and Blocked Persons
BIS Entity List
Bureau of Industry & Security export controls
UN Consolidated
United Nations Security Council sanctions
EU Consolidated
European Union financial sanctions
UK Sanctions
OFSI UK consolidated sanctions list
Scheduled Updates
Lists refresh on a schedule, and every screening records the list versions it ran against.
When restricted-party visitor screening applies
Restricted-party screening is not legally required for every visitor in every facility. The decision depends on your customer requirements, the type of work performed on site, and the regulatory programs your organization operates under. SecurePoint helps you apply it consistently where your compliance program calls for it, and document the screening result either way.
Federal contractor facilities
Many federal contractors apply restricted-party screening to visitors as a standard physical-access control, particularly for sites handling CUI, ITAR-controlled technical data, or EAR-controlled commodities. The screening result is captured in the visitor record alongside host approval and badge issuance.
ITAR/EAR foreign-person visitors
When the visitor is a non-U.S. person and the site has controlled technical data, restricted-party checks against OFAC, BIS Entity List, and denied-party data are commonly part of the export control program. See ITAR/EAR visitor workflows for the full visitor record shape, or read more on ITAR visitor screening.
CMMC physical access scope
Restricted-party screening is a useful supplement to the Physical Protection (PE) controls in NIST SP 800-171, particularly when visitor screening evidence supports your CMMC visitor logs.
Education and trade lanes
The same engine handles tuition payor, sponsor, faculty, and trade counterparty screening, useful if your organization operates across multiple regulated programs.
SecurePoint does not provide legal advice on whether your facility is required to screen every visitor. Consult your compliance program and counsel for your specific obligations.
Connected Capabilities
Adjudication Queue
High-risk matches flow directly into a structured review queue, with an optional AI-written summary and human decision logging.
ITAR and EAR Workflows
Export control workflows that capture policy checkpoints and reviewer actions required for ITAR and EAR compliance evidence.
After Visit Reports
Attach session context and host details to screening records for complete chain-of-custody documentation.
Sanctions screening FAQs
What is sanctions screening for visitor management?
Sanctions screening in visitor management checks visitor identities against official restricted-party and sanctions sources (for example OFAC and BIS) before granting physical access. In regulated facilities, this helps reduce export-control and reputational risk by ensuring your check-in workflow includes a consistent, documented screening step.
Which sanctions lists should regulated manufacturers screen against?
The right set depends on your risk profile and programs, but common sources include OFAC sanctions, BIS restricted-party data, and other government and multilateral sources relevant to your operations. The goal is consistent coverage and traceable evidence of what was checked, when it was checked, and who made the final access decision.
How do you handle false positives in sanctions screening?
False positives are handled with a documented review step: potential matches are flagged for human adjudication, additional context is considered, and the final decision is recorded. For audit readiness, keep the match details, timestamps, decision maker, and rationale, without storing unnecessary personal data.
Do AI tools replace compliance decisions in sanctions screening?
No. AI can assist with match review by surfacing potential matches and summarizing risk signals, but access decisions should remain with authorized personnel. The defensible approach is “assistive, not determinative,” with append-only audit logging of both the recommendation and the human decision.
Free guide: OFAC Sanctions Screening Best Practices
- Multi-list screening: OFAC SDN, BIS Entity List, UN, EU, UK
- Fuzzy matching and the OFAC 50% ownership rule
- How to build defensible screening evidence for audits
Or get it sent to your inbox
Ready to screen every visitor, payor, and vendor?
Run your first multi-list sanctions check in minutes -- unlimited screenings, fuzzy name matching, and audit-ready evidence included on every plan.
Request a demo and we'll walk your team through a real screening workflow for your use case.