Where counterparty sanctions screening belongs in contracting

Screening is usually run once, by one team, at the wrong moment. Treating it as a contract control changes where the check sits and what it leaves behind.

Where should counterparty sanctions screening sit in the contract process?

Screening belongs at three points in the contract record, not one. Screen at intake, before the counterparty is created as a contracting party; screen again at signature, because weeks can pass between intake and execution; and re-screen on a schedule through the term, because lists change while agreements run. Each screen should write a dated result, the list version checked, the identifier matched and the reviewer who cleared it onto the contract record, so the evidence is retrievable without asking the compliance team to reconstruct it.

Last updated: October 6, 2026 · Reviewed by the Aavenir Platform & AI practice

Key takeaways

  • ✓A single pre-signature screen leaves the longest part of the relationship uncovered, because list changes land during the term.
  • ✓Screening evidence is only useful when the result, list version, matched identifier and reviewer live on the contract record.
  • ✓Name-only matching produces noise. Registration numbers, addresses and ultimate parent data cut false positives sharply.
  • ✓The contract needs clauses that make screening enforceable, covering disclosure, flow-down, suspension and termination.

Most organisations can show you a sanctions screening report. Far fewer can show you which contract it belongs to, which list version it was run against, or whether anyone looked again after the agreement was signed. The check exists, but it exists in a screening tool, on a date, for a name that may or may not match the legal entity written into the agreement.

That gap matters because designations move and contracts do not. A supply agreement signed in March runs through the next three years, across list updates nobody connected back to the contract record. When a regulator or an internal auditor asks what you knew and when, the answer has to come from the agreement, not from a tool export that someone has to reconcile by hand.

Treating screening as a contract control rather than a compliance errand changes three things: where the check is triggered, what it writes down, and how often it repeats. None of those changes require a new screening vendor. They require the screening result to become a field on the contract record with an owner and a review date attached to it.

The five failure patterns behind most screening gaps

The gaps are rarely about list quality. They come from process placement, from counterparty data that cannot be matched reliably, and from evidence that lives somewhere the contract record cannot reach. Five patterns account for most of what audit teams find.

  • Screening at the wrong moment, the check runs after a counterparty has already been created and a purchase order issued, so clearing it is a formality rather than a gate.
  • Name-only matching, the screen runs against a trade name with no registration number or address, which produces either a flood of weak hits or a confident miss.
  • No link to the agreement, the result sits in a screening platform with its own identifiers, so nobody can answer which contracts a given counterparty actually has.
  • One screen, then silence, the relationship is monitored for the days before signature and ignored for the years after, which is the opposite of where the exposure sits.
  • Unwritten dismissals, a reviewer clears a potential hit and records nothing about why, leaving a decision that cannot be defended or repeated.

Each of these is a data and placement problem rather than a judgement problem. The reviewer who cleared the hit usually had good reasons. Those reasons simply never reached a record anyone could find later, and the counterparty identity used for the screen never reconciled with the identity on the signed agreement.

Screen the entity you are contracting with

Screening the trading name on an intake form while signing with a differently named subsidiary is a common and expensive mismatch. The screened identity and the contracting identity have to be the same record, with the same registration number, before the result means anything. A contract metadata model that masters counterparty identity once removes most of this class of error.

What a working screening control looks like

A control that holds up has a trigger, an identity, a result and a repeat. Those four elements turn screening from a report into something an obligation register can manage, which is the same mechanism used for any other recurring contractual duty.

  • Trigger at intake, before party creation. No counterparty record is created, and no requisition or order form proceeds, until an initial screen has returned and been recorded against the proposed legal entity.
  • One mastered counterparty identity. The legal name, registration number, country of incorporation, registered address and ultimate parent are held once and reused, so screening, contracting and payment all point at the same entity
  • A second screen at execution. Weeks often separate intake from signature. A confirmation screen at execution closes that window and is cheap to run when identity is already structured.
  • Scheduled re-screening with an owner. Re-screening is an obligation with a frequency, a named owner and an escalation path, sitting on the contract record alongside insurance certificates and reporting duties.
  • Evidence that travels with the agreement. Result, list version, date, matched identifiers and reviewer are stored on the contract, so producing the file is a query rather than a reconstruction exercise.

A five-step roadmap for putting screening on the contract record

Step 1, map where counterparties enter

List every route a new counterparty can take into the business, including procurement intake, sales order forms, legal entity onboarding, grant and sponsorship processes, and acquired contract populations. Most organisations find at least two routes that bypass screening entirely because they were never considered contracting channels.

Step 2, fix counterparty identity first

Screening quality is capped by identity quality. Normalise legal names, attach registration numbers and addresses, resolve duplicates into a single record and capture the ultimate parent. This work pays for itself twice, once in screening precision and once in spend and risk reporting.

Step 3, define the clause set

Agree standard language for the restricted-party representation, the ongoing notification covenant, the subcontractor flow-down and the immediate suspension right. Put it in the clause library with guidance on what may be negotiated and what may not, so reviewers are not drafting it fresh each time.

Step 4, instrument the obligation

Create re-screening as a tracked obligation with a frequency that reflects risk, an owner by role rather than by person, a due date and an escalation path. Tie the schedule to the live contract population so terminations stop generating work and new agreements inherit it automatically.

Step 5, close the loop on hits

Write down the dismissal standard before you need it. Who may clear a weak match, what evidence they must record, when a hit escalates to legal or compliance, and what happens to performance and payment while a hit is open. A documented standard is what makes a cleared hit defensible a year later.

See screening as a tracked contract obligation

Aavenir holds counterparty identity, screening results and re-screening schedules on the agreement record, with owners, due dates and evidence in one place.

Book a demo

What changes when screening sits on the contract

The practical difference is retrieval time. Teams that hold screening results on the contract record answer regulator and auditor questions from the agreement itself, in minutes, with the list version and reviewer attached. Teams that hold results in a separate platform spend days reconciling identifiers before they can answer at all. The underlying screening is identical; the evidence architecture is not. A second difference shows up in coverage, because re-screening tied to the live contract population does not quietly drift out of date as agreements are signed and terminated.

Placing the control, point by point

The table below sets out where each screening action belongs, who should own it and what evidence it has to leave behind. The pattern is deliberately conservative: each step is cheap, and the cost of skipping one shows up only when it is too late to fix.

Lifecycle pointScreening actionOwnerEvidence recorded
Intake, before party creationInitial screen on proposed legal entityContract operationsResult, list version, date, identifiers used
Review and negotiationConfirm restricted-party clause set is presentLegal reviewerClause variant and any approved deviation
ExecutionConfirmation screen on the signing entityContract operationsSecond result with signatory entity reference
Active termScheduled re-screen at risk-based frequencyNamed obligation ownerDated result per cycle, hits and dismissals
Designation or hitSuspension decision and notificationCompliance with legalDecision memo, actions taken, timestamps

Screening is not difficult work. It becomes difficult when the result has nowhere to live, the counterparty identity cannot be matched, and the schedule depends on somebody remembering. Putting the trigger in the contract workflow and the evidence on the contract record removes all three problems at once, and it does so without changing the list sources or the reviewers already doing the judgement work. For organisations running third-party risk contract automation already, screening is one more obligation on a register that exists, and the marginal cost of adding it is small.

For related guidance, see How to build a clause library your legal team trusts, When the order form and the MSA disagree and Proving an obligation was actually met.

FAQ

Counterparty screening questions, answered

Is a pre-signature sanctions check enough? +
No. A pre-signature check tells you the counterparty was clear on one date against one list version. Designations are added and amended continuously, and most commercial agreements run for years after signature. A programme that screens only at signature leaves the longest and highest-value part of the relationship unmonitored. Periodic re-screening through the term, tied to the live contract population rather than a static vendor list, is what closes that gap.
What should a screening record actually contain? +
Five fields make a screening record defensible: the legal entity name and identifier that was screened, the lists and list versions checked, the date and time of the check, the result including any hits reviewed and dismissed, and the named reviewer who cleared it. Anything less forces someone to reconstruct the decision later. Holding those fields on the contract record rather than in a screening tool export means the evidence travels with the agreement.
How do you cut down false positives? +
Most false positives come from screening a name alone. Adding structured identifiers reduces noise substantially, including company registration numbers, registered addresses, country of incorporation, date of birth for individuals and the ultimate parent entity. Normalising counterparty names so one legal entity is not stored five different ways also helps, because duplicate records multiply the same hit across a portfolio.
Which clauses make screening enforceable? +
Four clause families carry the weight. A representation and warranty that the counterparty, its owners and its affiliates are not restricted parties. An ongoing covenant to notify you of any change in that status. A flow-down obligation that pushes the same requirement to subcontractors and agents. And a suspension or termination right that lets you stop performance immediately on a designation, without waiting for a cure period to run.
Who should own screening, compliance or contract operations? +
Compliance should own the policy, the list sources and the escalation standard. Contract operations should own the trigger and the evidence, because that team controls intake, counterparty creation and the contract record where the result has to land. When compliance owns both, screening becomes a queue that sits outside the contract workflow and the check gets skipped under deal pressure.
Does screening apply to customers as well as suppliers? +
Yes. Sanctions and export control exposure runs in both directions, and revenue-side counterparties are frequently the weaker control point because sales intake is faster and less structured than procurement intake. Any agreement that creates a payment flow, a data flow or a shipment to a counterparty is in scope, which in practice means customers, suppliers, resellers, agents and joint venture partners.

Make screening part of the contract record

See how Aavenir holds counterparty identity, screening results and re-screening schedules on the agreement itself, so compliance evidence is a query rather than a project.

  • ✓Screening results and list versions on the contract record
  • ✓Scheduled re-screening with owners and escalation
  • ✓Standalone or native on ServiceNow