Sanqto
Law in force 269/2014 · 833/2014 · PL 13.04.2022

Have you screened your last customer against the EU sanctions list?

Liability for serving a sanctioned person sits with you — not the customer. Today. Whether or not your industry is formally under AML.

Works offline
GDPR-aligned
EU / UN / OFAC lists
Auditable reports
Sanqto panel
live preview
Subject under review
Demo Company Ltd.
VAT GB000000000 · UBO: J. Smith
Result: hit
DO NOT PROVIDE THE SERVICE
Match
97.4% — Annex I, 269/2014
Source
EU • OFAC • PL-MSWiA
Time
0.8 s
Required actions
  • Pause the service.
  • Notify the FIU within 24h.
  • Archive the report (5 years).
flowlocal · 0.8 s
customer
screening
report
Legal status — April 2026
PLN 20,000,000
maximum administrative fine
Art. 15(1)(2) of the Act of 13.04.2022
15 yrs
imprisonment in qualified cases
Art. 15(2)
2,171
entities currently in EU annexes
as of April 2026
< 30 s
to screen one customer
Sanqto deployment
Why now

Two independent reasons to roll out screening this quarter.

In force today

The ban on providing services to listed persons is absolute.

Article 2 of Reg. 269/2014 doesn't require intent. Lack of knowledge does not excuse administrative liability. The regulator doesn't ask whether you knew — they ask whether you checked.

  • Administrative fine up to PLN 20,000,000
  • Criminal liability up to 15 years
  • GIIF report within 24h of detection
Mandatory soon

The EU is extending mandatory active screening to more sectors.

Direction of travel is clear: the AMLR package and the sanctions enforcement directive will pull in services not covered today. Firms that prepare early will not be retrofitting under pressure.

  • Real estate, brokerage, luxury goods
  • Shorter reporting windows
  • Auditable verification logs required
How it works

Three steps, less than 30 seconds per customer.

01

Import the customer's data

By hand, CSV from your system, API, or CRM integration. Just what you already have on the contract: first name, last name, company name, tax ID.

02

The app matches against the lists

EU (269/2014, 833/2014), UN, OFAC and the Polish MSWiA list. Fuzzy match by name, national ID, tax ID, date of birth and UBO.

03

You receive a report

Clean or with an alert. Always timestamped, signed, with the list version. Ready for GIIF and tax audit.

On-premise · GDPR

Your data stays with you. Literally.

The app runs locally on your hardware — laptop, workstation, or your own server. We push the reference lists. You never upload customer data anywhere.

Zero data-processing agreements
We're not your processor — we don't have access to your data.
Zero third-country transfers
GDPR Art. 44 doesn't apply — nothing leaves your network.
Windows · macOS · Linux
Installer or container. Works offline after first update.
Reference files, not an API
Lists are pulled as signed files; traffic is one-way.
data flow diagram
1
Sanqto server → your network
We deliver the EU/UN/OFAC lists as digitally signed files.
2
Your network (closed loop)
Customer data is matched locally. Results are saved to your disk.
3
Your network → Sanqto server
This direction does not exist. Ever.
Interactive demo

This is what verification looks like in your panel.

Toggle between a clean and a hit scenario. It's the exact screen you see in the app.

Result in under a second across 2,171 records.
Full PDF report with hash and signature.
UBO (ultimate beneficial owner) lookup.
Sanqto panel
live preview
Subject under review
Demo Company Ltd.
VAT GB000000000 · UBO: J. Smith
Result: hit
DO NOT PROVIDE THE SERVICE
Match
97.4% — Annex I, 269/2014
Source
EU • OFAC • PL-MSWiA
Time
0.8 s
Required actions
  • Pause the service.
  • Notify the FIU within 24h.
  • Archive the report (5 years).
Industries we cover

If you have a customer — you have exposure.

Click your industry for concrete scenarios and a workflow tailored to your operation.

Pricing

Perpetual licence. No subscription.

One-time fee, VAT invoice in EUR or PLN. Optional updates from year 2. Your data stays in your infrastructure.

Starter
2 500 EURone-time
for e-commerce and small companies
1 seat · 1 certificate
  • Legal framework — industry templates (11 documents / ~100 pages)
  • Self-service document customisation
  • Sanction screening software licence
  • EU, UN, OFAC, national lists
  • Training + exam + Sanctions Compliance Officer certificate (1 person)
  • List updates every hour for 12 months
  • Email support
Business
5 900 EURone-time
for travel agencies, wholesalers, mid-market
up to 5 seats · 2 certificates
  • Everything in Starter
  • Legal framework tailored to your industry
  • 2h consultation with a compliance lawyer
  • CSV / API / CRM import
  • Portfolio monitoring 24/7
  • Beneficial ownership (UBO) verification
  • Training + exam + Sanctions Compliance Officer certificate (2 people)
  • Priority support
Enterprise
from 15 000 EURone-time
for capital groups and large operators
unlimited seats · 3 certificates
  • Everything in Business
  • On-premise deployment — your data never leaves your infrastructure
  • Full documentation customisation by a partner lawyer
  • SSO / Active Directory
  • Training + exam + Sanctions Compliance Officer certificate (3 people)
  • Dedicated account manager
  • SLA and deployment agreement
  • Compliance team training

Additional Sanctions Compliance Officer certificates

250 EUR per person — online training, exam and a certificate valid for 12 months. For clients with an active Sanqto licence.

Updates from year 2

The first year of sanction-list updates and support is included in the licence price. From year 2 there is an optional maintenance fee:

  • Starter: 500 EUR / year
  • Business: 1 000 EUR / year
  • Enterprise: 2 500 EUR / year

Without maintenance the licence keeps working, but the lists are no longer updated.

Selling compliance to your clients? Let's partner up.

We run a partner programme for law firms and compliance advisors. The law firm delivers documentation customisation to the client under its own contract, while Sanqto provides the software licence. Partner commission for every referral.

Become a partner

* All prices are net; VAT of 23% is added to every invoice. Payment in EUR or PLN (NBP mid-rate from the invoice issue date).

* Perpetual licence — no hidden fees, no auto-renewal, no vendor lock-in.

* The software runs on the client's infrastructure (on-premise for Enterprise, cloud or on-premise for Starter and Business).

Most-asked questions

Truth first, technology second.

Does this really apply to my industry?
Yes. The ban on making funds available or providing services to listed persons (Art. 2 of Reg. 269/2014) applies to all economic operators — regardless of whether the industry is formally under AML obligations. For sectors like travel or real estate, criminal and administrative liability already exists today.
What if the customer doesn't agree to be screened?
Screening uses data you already hold from the contract or invoice (first name, last name, company name, tax ID, optionally date of birth). It does not require customer consent — it is the business's discharge of a legal obligation (GDPR Art. 6(1)(c)).
What do I do when there's a hit?
The app flags the result red, generates a justified report, and surfaces the procedure: pause the service, freeze funds, notify the FIU within 24 hours. Nothing is reported automatically — the decision sits with you.
Are the reports accepted by the FIU and tax authority?
Each report carries a timestamp, the reference-list version, the operator identifier and a hash of the input file — a format aligned with regulator expectations. Local archival for 5 years (the required retention period).
How often are the lists updated?
Every hour, plus immediately after publication of changes in the Official Journal of the EU. The app pulls reference files itself — it never sends customer data the other way.
Does this integrate with my CRM?
Yes. The Business and Enterprise tiers expose a REST API and ship integrations for popular CRMs (Pipedrive, HubSpot, Salesforce, Bitrix). On Starter you use the manual form.
Where is my data physically?
Wherever you install the app — your machine, your server, your network. There is no "Sanqto cloud" for customer data. Consequence: no data-processing agreements, no third-country transfers.
What's the fine if I don't screen?
Up to PLN 20,000,000 in administrative fines (Art. 15(1)(2) of the Act of 13 Apr 2022) and criminal liability up to 15 years for making funds available. Liability sits with the business — not the customer.
Contact

Book a 20-minute deployment call.

No salesperson, no slide deck. We'll show the install and answer the legal questions.

We reply within 1 business day.
Demo on your data (locally, on your hardware).
30-day trial, no commitments.

By clicking, you consent to being contacted with our offer. Data does not leave the EEA.

See demo