Acceptable use policy

Use OnSanctions to screen people and companies you have a lawful reason to screen, such as customer due diligence, sanctions compliance, supplier and counterparty checks, and fraud and risk management.

• Screening people without a lawful basis, or sending personal data you have no right to process.
• Using results to harass, stalk, discriminate against or unlawfully deny services to anyone.
• Helping anyone evade sanctions or other laws.
• Using results for employment, tenancy, credit or insurance decisions about consumers where specific laws (such as the US FCRA) apply.
• Scraping, bulk-querying or reselling results, or building a copy of the underlying lists.
• Probing, load-testing or attacking the service outside our responsible disclosure policy.

Don't share an API key outside your organization or put it in client-side code. Use a separate key for each system, limit live keys to your servers' IP addresses where you can, and revoke a key that leaks.

• The screening API allows 60 requests a minute per organization.
• Quick check allows 5 checks a minute from one address. Paid plans include 30 checks a day for the organization.
• Test keys have daily limits.

Report suspected misuse to hello@onsanctions.com, and security issues under the responsible disclosure policy.