InackGuardBuyer’s checklist
How to choose a screening tool.
Six questions to put to any vendor, how to test the answer yourself, and how we answer each one, including where we are weaker.
1
Coverage and freshness
Which lists and registers are searched, how many records, and how old can the data be?
How to test it. Ask for the list names, record counts and the maximum age in writing. Check a list you care about against its source.
How we answer. Global sanctions, exclusion, export-control and forced-labour lists, PEP data, company registers and court records, searched together. Every report names what was searched and anything that could not be.
2
Matching quality and alert handling
How does it match names, aliases and typos, and how are weak matches handled?
How to test it. Run your own sample: 20 names you know are listed, 20 you know are not, with spelling variants. Ask how tiers and thresholds work.
How we answer. Every match comes with a score and the reason. Strong matches go to escalation, possible matches to review, weak leads are shown but not raised. In our internal test every listed name and alias was found.
3
Audit trail and evidence
Can you show an examiner what was checked, when, against which list, and prove it was not changed?
How to test it. Ask for an exported example, and whether a third party can verify it without trusting the vendor.
How we answer. Each finding cites source and date. Evidence is hashed and chained; export a bundle and verify it offline. Replay any past check against today.
4
Price transparency
What is the total cost for your volume, including minimums, seats and add-ons?
How to test it. Normalise every quote to the same volume. Ask about minimum commitments and list add-on fees.
How we answer. Pay per report, price shown before you run it, a free preview first. No seats, no monthly minimum, no contract.
5
API and integration
Is there a sandbox, documentation, signed webhooks and safe retries?
How to test it. Make one real call in the trial. Check error handling and rate limits.
How we answer. One call returns 202 and a check id. Scoped keys, idempotency keys, rate limits with headers, signed webhooks with a replay window, OpenAPI.
6
Security, legal and exit
What certifications, subprocessors, data location, retention and exit terms apply?
How to test it. Ask for the security package, the subprocessor list and the data-processing agreement.
How we answer. A security package on request, a plain list of controls in place and what is not yet, data stored in the United States, document text deleted after 30 days, and a data-processing agreement.
A five-step trial
Two hours, your own names, a fair comparison.
STEP 1
Pick 40 names
20 you know are on a list and 20 you know are not, with spelling variants and a few companies.
STEP 2
Run the same names everywhere
Same names, same day, in every tool you are comparing.
STEP 3
Check the evidence
Open each result. Is the source named, is the date shown, are the gaps stated?
STEP 4
Test the export
Export what you would hand an examiner. Can someone else verify it?
STEP 5
Add up the real cost
Minimums, seats, add-ons and your own volume, for a year.
Bring your 40 names.
A free preview shows what a report finds. No card needed.