Counterparty and Vendor Due Diligence for Finance Teams

A signed contract proves little

Many counterparties are checked once, at onboarding, by whoever needs them approved. A W-9 arrives, a bank letter is attached, and the vendor goes into the master file. Nobody asks who sits behind the holding company that owns the distributor, whether a director appears in enforcement news, or whether the supplier you depend on has had three tax liens filed against it this year.

The questions arrive later, at a worse moment. A bank queries a payment to a sanctioned jurisdiction. A customer's audit asks how you vet your agents. A vendor you prepaid stops answering the phone. Research done before the decision gives you choices that disappear after it.

Engraving of a horse built from shipping crates before a city gate, a hatch ajar with a magenta latch. — Look inside before you open the gate.

Five lines of inquiry, plus batches

Ownership and control
Who owns and controls the entity, traced through holding companies using state registries, foreign company registers, SEC filings and other public records, with any gaps stated plainly.
Sanctions and watchlists
Screening of the entity, its owners, directors and banks against OFAC, UK and EU sanctions lists, applying OFAC's 50 Percent Rule to ownership chains, with every potential match resolved and documented.
Adverse media and litigation
News coverage, court dockets, regulatory enforcement actions and debarment lists such as the SAM.gov exclusions, searched for the entity and for its principals in their business roles.
Financial health indicators
Liens, judgments, bankruptcy filings, UCC filings and filed accounts where they exist, read against the size of your exposure to the counterparty.
Your own payment history
How you have paid the counterparty, including bank-detail changes, matches to employee addresses or accounts, invoices clustered near approval limits and payments to unexpected countries.
Batch screening of the vendor master
For a whole vendor master, sanctions screening and employee matching across every active vendor, with full research only on the vendors that raise flags.

A red-flag report with sources

Deliverable	What it is	When
Research plan	The counterparties in scope, the decision each supports, the questions to answer and the sources we will use	Week 1
Red-flag report	Per counterparty, an ownership chart and findings rated high, medium or low, each with source and date, plus a plain list of what remains unknown	Week 3 to 8, depending on scope
Screening log	Every list searched, the date, the names and identifiers used, and how each potential match was resolved	With the report
Vendor master match results	For batch scopes, vendors sharing a bank account, address or phone number with an employee or with each other	Week 2 of batch scopes
Re-screening routine	A short procedure and schedule your team can use to screen new and changed vendors between reviews	Final week

Scoped to the decision at hand

Days 1 to 3
Define the question
We agree the counterparties, the decision each piece of research serves, how much uncertainty you can accept, and the date you need an answer.
Weeks 1 to 3
Gather public records
We search registries, filings, court records, sanctions lists and media, and trace ownership through every layer of holding companies we can see.
Weeks 2 to 4
Match against your data
We compare the counterparty's details with your vendor master, employee records and payment history to see how the relationship has actually worked.
Week 3 to 8, by scope
Report and review
A second reviewer checks every finding against its source. We walk you through the report and what each red flag would mean for the decision.

Identifiers make the research precise

Legal names, registration numbers, addresses and known principals for each counterparty
The contract, onboarding file, W-9 or W-8 forms and bank letters you already hold
Read-only access to the vendor master and payment history, or exports we specify
An employee address and bank account list for matching, handled under access logging and deleted with other engagement data 90 days after close
The decision the research supports and the date you need to make it

Is this the right fit?

A good fit

Companies onboarding a distributor, agent or strategic supplier, especially one held through other entities or based abroad
Private-equity sponsors and portfolio companies screening add-on targets or key suppliers before signing
Fintech and digital-asset businesses reviewing partners, program managers or large counterparties
Finance teams that want the whole vendor master screened and matched against employees once a year

Not the right fit

Investigations into anyone's private life, or research on individuals beyond their business roles
Financial due diligence on earnings quality for a transaction, which calls for a transaction advisory firm

Every red flag gets a rating

Every finding in the report carries a rating and a reason. High means it would change the decision on its own, such as an owner on a sanctions list or a vendor bank account that matches an employee's. Medium means it needs an answer before you proceed, such as a holding company in a jurisdiction that publishes no ownership data. Low means it is worth knowing but not acting on, such as a lawsuit dismissed years ago. Each finding cites its source and the date we saw it.

Unknowns are stated plainly

Absence of evidence is reported as absence, not as clearance. If a chain of ownership ends at an entity whose shareholders are not published, the report says where the chain ends and what would close the gap, for example a certified ownership chart from the counterparty. A clean screening result says which lists, which date and which names were searched. Our article on beneficial ownership after the CTA rollback explains why US ownership often has to be pieced together this way.

Individuals are researched in business roles

Owners, directors and officers are researched in their business roles only: directorships, enforcement actions, sanctions, litigation involving the counterparty and relevant press coverage. We do not research family, health, personal finances or social media beyond what bears on the business relationship, and we do not obtain consumer credit reports.

Batch screening finds what onboarding missed

Onboarding checks age. Owners change, banks change and sanctions lists are updated. A batch review of the full vendor master screens every active vendor against current lists and matches vendor bank accounts, addresses and phone numbers against your employee records and against each other. Two vendors paid into one bank account, or a vendor sharing a home address with an AP clerk, is exactly what this review exists to surface. Only the vendors that raise flags get full research, which keeps the work proportionate.

If you want the matching repeated every week rather than once a year, Continuous Controls Monitoring can run it. For the payment controls that should surround those vendors, see vendor bank-change fraud: five controls that stop it.

What people ask before hiring us

Can you tell us who ultimately owns a US company?

Often, but not always. US companies are now permanently exempt from beneficial ownership reporting to FinCEN, and those filings were never public. We build the picture from state registries, filings, court records, lien filings and the company's own representations, and we state what we could not confirm. Where the gap matters, we suggest what to ask the counterparty for directly.

Do you screen continuously?

This service screens at a point in time and hands you a routine to repeat it. If you want screening repeated automatically whenever vendors are added or changed, it can run inside Continuous Controls Monitoring.

What happens if you find a sanctions match?

We tell you straight away and document how the match was assessed. A confirmed match can create legal obligations, such as blocking property or filing a report, on which your counsel should advise. We are not a law firm, but we will give your counsel the evidence they need.

Is this an investigation?

No. It is research from public records and your own data, carried out to support a business decision. If we find signs of fraud or misconduct involving your own people, we stop, tell you, and discuss whether an investigation-led scope or outside counsel is needed.

Also in Financial Data Research

Written research on counterparties, vendors and sectors, built from public records, filings and your own ledger, with every source and method stated.

Benchmark & Sector Research
Commissioned research on controls maturity, finance costs and transparency practice across a sector or portfolio, with the full methodology published alongside every report.

Tell us what you are seeing

A first conversation is a scoping call: what worries you, what you need to show, and to whom. You leave it with a view on where to start, whether or not you hire us.

Start a conversation

Writehello@financeethics.com

Call(307) 365-5252

Office7124 Commons Dr, Cheyenne, WY 82009

HoursMonday to Friday, 9:00 to 17:00 Mountain Time

Know who owns the company you pay

A signed contract proves little

Five lines of inquiry, plus batches

Ownership and control

Sanctions and watchlists

Adverse media and litigation

Financial health indicators

Your own payment history

Batch screening of the vendor master

A red-flag report with sources

Scoped to the decision at hand

Define the question

Gather public records

Match against your data

Report and review