This Privacy Policy explains what information Due Vigilance ("we," "us") collects when you use this OFAC/sanctions name-screening tool (the "Service"), how that information is used, and who else handles it.
Last updated: September 25, 2026.
Information We Collect
- Account details. If you sign in with Google, we receive your name, email address, profile picture link and Google account identifier from Google. Enterprise accounts are created by your organisation's administrator with a username and email address; passwords are stored only as a one-way hash.
- Screening data. The names and files you submit for screening, and the results: matched entries, scores, timestamps, and the algorithm and settings used for each search.
- Alert review records. The statuses and comments you record when reviewing alerts, who made each change and when, and the email addresses you assign alerts to.
- Billing records. If you subscribe to a paid plan, we keep the identifiers Stripe gives us for your customer record and subscription. We never receive or store your card details.
- Messages. The name, email address and message you send through our Contact Us page.
The Service uses a single session cookie to keep you signed in. We do not use advertising or analytics cookies.
How We Use This Information
We use this information to provide the Service to you: to sign you in, run your screenings, show you your search history and alerts, produce your exports, apply your plan's limits, send the emails described below, and answer your messages. Your search records are also kept as a log for your own record-keeping and audit purposes.
Who Else Handles Your Information
We do not sell your data. We share it only with the providers the Service depends on, and only for the purpose each one serves:
- Google handles sign-in for Free, Starter and Professional accounts.
- Stripe processes payments for paid plans, under its own privacy policy.
- Hostinger hosts the Service, its database and its files, and delivers the emails the Service sends.
The Service sends email for account and review activity: a welcome message, password reset links for Enterprise accounts, a summary when a screening raises alerts, and a notice when you assign an alert to someone. An assignment email goes to the address you enter and contains the screened name, the matched entry, the score and your comment, so only assign alerts to people entitled to see them.
Screening is performed on our own servers against a copy of the publicly available U.S. Treasury SDN & Consolidated Sanctions Lists. No name you submit is sent to OFAC or to any other outside party to be screened. Our copy of the lists is refreshed from the Treasury's published data every four hours.
Data Storage and Retention
Account details, search records, alert review records and uploaded files are stored on our servers and are not currently deleted on any automatic schedule. Your plan's search history period limits how far back you can view and export your records; it does not delete older records. If you want records deleted, contact us using our Contact Us page.
Security
We take reasonable measures to protect data submitted to the Service, but no method of electronic storage is completely secure, and we cannot guarantee absolute security.
Your Rights
You may contact us to request access to, correction of, or deletion of data associated with your use of the Service.
Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
Contact Us
Questions about this policy can be sent to us via our Contact Us page.