Skip to main content
Thirdwatchthirdwatch
guides

Build an OFAC Vendor Review Workflow

Use official OFAC records to create a traceable vendor-review queue without treating keyword matches as verdicts.

Jul 21, 2026 · 2 min read · 264 words
See the scraper →

Vendor onboarding often begins with a legal name, country, registration number, owners, and addresses. OFAC's public rows are an important input, but a safe workflow must distinguish record retrieval from identity resolution. The OFAC Sanctions Scraper handles the first step and preserves the official evidence.

Create targeted candidate searches

Search the legal name and one or two distinctive variations separately. Keep the lists broad unless policy calls for a narrower program scope.

{
  "queries": ["Northstar Maritime", "Northstar Shipping"],
  "listType": "both",
  "maxResults": 100
}

Export the resulting UIDs, names, programs, remarks, entity types, vessel fields, and list origins into a review table. Add internal columns for vendor ID, submitted legal name, jurisdiction, reviewer, disposition, rationale, and review time. Do not overwrite the published values with internal conclusions.

Separate candidates from decisions

An exact spelling can still be a different party. A transliteration or alias can refer to the same party despite different text. Reviewers need the full official entry plus reliable vendor identity evidence and the organization's matching rules.

Define outcomes such as cleared, escalated, confirmed, or insufficient information. Require a source link and rationale for every disposition. If a record changes later, the retained UID makes it possible to identify which decisions relied on an earlier version.

Schedule separate monitoring Tasks for high-risk keywords or programs rather than rerunning every onboarding search continuously. When monitoring finds an addition, join it back to active vendor identities and reopen only relevant cases. This keeps the workflow auditable and prevents a simple keyword tool from silently becoming an automated rejection system.

Frequently asked questions

Should I search a generic company word?

Prefer distinctive legal-name tokens and review broader searches carefully because common words create many unrelated candidates.

Is a name hit enough to reject a vendor?

No. A hit is a candidate for identity review under your organization's policy.

Related

Try it yourself

100 free credits, no credit card.

About 30 real searches. Add the MCP to Claude or Cursor in two minutes.