Buyer's guide

Visitor management systems with sanctions screening: how they work and what to ask.

A visitor management system with sanctions screening compares each visitor's name with government restricted-party lists at sign-in and stops the visit when the name comes close to a listed party. Most systems in the category say they do this. The differences sit in which lists, how fresh they are, how names are compared, and what happens after a hit. Below are eight questions that bring those differences out, followed by BeckonDesk's own answers so you can hold us to the same standard.

Quick answer. For a US site, screening should cover at least the OFAC SDN List and the US Consolidated Screening List, refresh daily, match names fuzzily including published aliases, hold potential matches for a trained reviewer rather than the host, and keep a record of every hit and decision. A name match is a lead to check, never a finding: OFAC says a close or even exact name match can turn out to be someone else.

Reviewed 2026-10-20 against OFAC, Commerce and State Department sources listed at the end. Not legal advice.

What sanctions screening at sign-in does

When a visitor signs in at a kiosk, or a host pre-registers them, the system takes the name (and usually the company) and scores it against every name on the lists it holds. Below a set score nothing happens. Above a review score the visit is held while a person checks. Above a higher score the visit is refused until someone with authority overrides it.

The person checking compares the list entry's other details, such as date of birth, nationality and ID numbers, with the visitor's ID. That is the step OFAC describes in its guidance on potential matches (FAQ 5, updated 9 September 2026), and it is why software can only flag, not decide.

No US regulation says every business must screen its visitors. OFAC liability is strict, though: a person subject to US jurisdiction can be held civilly liable for dealing with a blocked person without knowing it (Tri-Seal Compliance Note, March 2024). OFAC's 2019 Framework for Compliance Commitments expects a risk-based program with internal controls, and for sites that host foreign visitors, contractors or customers, screening at the door is one of those controls.

Eight questions that separate one system from another

#	Ask	Why it matters	A good answer
1	Which lists does it screen, by name?	The SDN List is the best known but not the only one. The US Consolidated Screening List combines 12 lists from Commerce, State and Treasury, including the BIS Entity List, the Denied Persons List and the State Department's ITAR debarred list. Sites with UK or EU ties also need the UK Sanctions List (the only official UK source since the OFSI Consolidated List closed on 28 January 2026) and the EU consolidated list.	Every list named, with the official source it is downloaded from.
2	How often are the lists refreshed, and what happens when a download fails?	OFAC publishes changes when designations happen, not on a schedule. trade.gov rebuilds the CSL every day at 5:00 AM Eastern. An old copy screens against last week's designations.	At least daily, a visible last-refreshed time, and an alert to a person when a source fails.
3	How are names compared?	Exact matching misses transliterations, reordered names and dropped accents. OFAC's own search tool scores names with Jaro-Winkler and Soundex (FAQ 249) but recommends no threshold (FAQ 250), so each system's choice matters.	A stated method, stated thresholds, and the fields compared (person, company).
4	Are published aliases screened?	Lists publish alternate names. On 20 October 2026, 12,467 of the 26,159 entries in the CSL file carried at least one. A system that reads only primary names misses a visitor using a listed alias.	A yes or no for each list, not for the system as a whole.
5	What happens at the door on a potential match?	Refusing every weak match teaches staff to override. Letting weak matches through defeats the point.	A hold on potential matches, a refusal on strong ones, and nothing that tells the visitor why.
6	Who can clear a hit, and what is kept?	OFAC expects the reviewer to compare identifiers and escalate likely matches. A host waiting for a meeting to start is the wrong reviewer.	Named roles only, a written reason for overrides, and the reviewer, time and decision stored.
7	Does every way in run the same check?	Kiosk sign-in, pre-registration, front-desk entry and phone check-in are often separate paths, and contractors or drivers often use their own.	The same thresholds and outcome on each path, stated path by path.
8	What can you hand an auditor?	OFAC's Framework lists screening software faults among the root causes of past violations: outdated lists, missing identifiers, missed spellings. Your evidence is the record.	Hits and decisions stored with the list source and score, exportable without asking the vendor.

BeckonDesk's answers

Here are the same eight questions, answered for BeckonDesk as it runs today.

#	Question	BeckonDesk
1	Lists	OFAC SDN List. US Consolidated Screening List: the BIS Entity List, Denied Persons List, Unverified List and Military End User List; the State Department ITAR debarred and nonproliferation lists; and Treasury's non-SDN lists. UN Security Council Consolidated List. Plus your own watchlist, with each entry set to ban or flag.
2	Refresh	The OFAC, CSL and UN lists are downloaded from their official publishers each night at about 02:00 UTC, and again shortly after a restart if any copy is more than 20 hours old. If a download fails, the last good copy stays in use and our operations team is alerted on every run until it loads.
3	Comparison	Names are upper-cased and stripped of accents and punctuation, then scored from 0 to 100: 100 for an exact match, 93 when all the words of one name (two or more) appear in the other in any order, otherwise the higher of an edit-distance similarity and a word-overlap score. The visitor's company is screened as well as their name. Date of birth and nationality are not used in scoring.
4	Aliases	Alternate names published on the UN list are screened as names in their own right.
5	At the door	At the kiosk, a score of 80 or above holds the visit and 88 or above refuses it (85 for a ban entry on your own watchlist). The visitor is asked to see the front desk and is not told why. The host, receptionists and admins are emailed, and the email leaves out the match details.
6	Who clears	Only admins can approve, reject or override a hold. Overriding a refusal requires a written reason. The reviewer's name, the time and their note are stored with the decision. An AI-written summary can be added to a kiosk hold to help the reviewer; it never clears anyone.
7	Every way in	Kiosk sign-in, pre-registration QR, front-desk entry and phone check-in all refuse matches at 88 or above. The hold for matches between 80 and 88 runs at the kiosk; pre-registration shows those matches to the admin creating the invitation.
8	Records	Holds and refusals are stored with the list source, matched name, score and decision. Changes to records go to an audit log that cannot be edited or deleted, exportable as CSV. Optional nightly re-screening of people on site and upcoming pre-registrations raises a security alert when a list update creates a new match.

Screening is included in the single plan at $79 per location per month, with no per-screen fee, and in the 30-day free trial.

What screening at the door does not do

It does not authorize exports. A visitor who clears every list can still be a foreign person who may not see ITAR or EAR controlled technical data without a license. See visitor screening for defense and ITAR-adjacent sites.
It does not see ownership. Under OFAC's 50 Percent Rule, a company owned 50% or more by blocked persons is blocked even if it is not listed. No name list contains it.
It does not decide. OFAC confirms no matches and approves no screening software (FAQ 469). The decision, and the obligation, stay with you.

Frequently asked

What is a visitor management system with sanctions screening?

It is visitor sign-in software that compares each visitor's name, and usually their company, with government restricted-party lists such as the OFAC SDN List and the US Consolidated Screening List at sign-in or pre-registration, then holds or refuses the visit when the name scores close to a listed party so a trained person can check it.

Which lists should visitor sanctions screening cover?

For a US site, at least the OFAC SDN List and the US Consolidated Screening List, which adds the BIS Entity List, Denied Persons List, Unverified List, Military End User List, the State Department ITAR debarred and nonproliferation lists, and Treasury's non-SDN lists. Sites with UK or EU operations should add the UK Sanctions List, which replaced the OFSI Consolidated List on 28 January 2026, and the EU consolidated list. Many also add the UN Security Council list.

Is visitor sanctions screening legally required in the US?

No US regulation names visitor screening as a requirement. OFAC civil liability is strict, so dealing with a blocked person is a violation even without knowledge, and OFAC's Framework for Compliance Commitments expects a risk-based program with internal controls. Screening visitors is how many sites put that control at the door.

Does a name match mean the visitor is sanctioned?

No. OFAC's guidance on potential matches says to compare the full list entry's identifiers, such as date of birth, nationality, ID numbers and address, with what you know about the person, and that a close or even exact name match can be invalid. OFAC does not confirm matches for you.

How much does BeckonDesk's sanctions screening cost?

It is included in BeckonDesk's single plan at $79 per location per month, with no per-screen or per-visitor fee, and it runs in the 30-day free trial.

Sources

OFAC FAQ 5: determining whether a potential match is valid (updated 9 September 2026)
OFAC FAQ 249, 250 and 469: Sanctions List Search scoring, thresholds, no certification
Tri-Seal Compliance Note, 6 March 2024 (strict liability)
A Framework for OFAC Compliance Commitments, May 2019
OFAC revised guidance on entities owned by blocked persons (50 Percent Rule)
Consolidated Screening List, International Trade Administration; entry counts from the downloadable CSV, 20 October 2026

Test it with a name from the list.

Start a 30-day trial, sign in a test visitor under a listed name at the kiosk, and see the hold, the notification and the review record for yourself.

Start free trial Book a walkthrough