Studio Contracts: Sanctions Vetting in 2026

Getting sanctions compliance right in your studio contracts is non-negotiable if you operate internationally or just have a global client base. The fines for getting it wrong are massive, easily running into the millions, and the hit to your reputation can be permanent. A sanctions screw-up also brings on intense regulatory heat, can get your bank accounts shut down, and might even lead to criminal charges for the people in charge. Global sanctions are a tangled mess of frequent updates and overlapping rules, so you have to be deliberate about how you vet people. Are your current processes actually protecting your business from these very real risks?

1. Establish a Tiered Vetting Workflow for New Engagements

You can’t use a single vetting method for everyone. It just doesn’t scale and misses the point of risk. You need a tiered system that dials up the due diligence based on who you’re dealing with and what you’re doing. Every new studio contract, whether it’s with a freelance aesthetician, a product supplier, or a marketing consultant, has to start with an initial screening. This first pass should be an automated, complete check against global sanctions lists. This is all about spotting the obvious red flags fast. For example, if you’re bringing on a new supplier for waxing supplies, their company name and its owners have to clear this first check. No exceptions.

Pro Tip: Set hard rules for when to escalate. Don’t leave it to guesswork. For instance, if a counterparty is based in a high-risk jurisdiction (think countries flagged by FinCEN) or the deal is worth more than a set amount, say $10,000, it should automatically kick off an enhanced due diligence review. Write these rules down and make them official policy.

2. Use Sanctions Screening Software

Trying to check government websites by hand is a recipe for disaster. It’s slow and you’ll miss things. Invest in proper sanctions screening software. Platforms like Refinitiv World-Check or Dow Jones Risk & Compliance pull together data from thousands of sanctions lists, watchlists, politically exposed person (PEP) lists, and bad press databases. These tools give you one place to do your checks and, importantly, create a centralized, auditable record. When you’re typing in the data, use full legal names and registered company names, plus any aliases you know about. Those partial matches are where the real work begins.

Screenshot Description: An example screenshot from Refinitiv World-Check showing a search results page. The search query “John Doe” yields several potential matches, each with a risk score, country of origin, and source of listing (e.g., OFAC SDN, EU Consolidated List). A prominent “Investigate” button is visible next to each result.

Common Mistake: Only searching for exact matches. Sanctions lists are full of spelling variations, transliteration problems, and aliases. You have to configure your software to use fuzzy logic or phonetic matching to catch names that sound the same but are spelled differently. A decent system will flag “Muhammed” and “Mohammed” as potential hits that a human needs to review.

3. Implement Contractual Sanctions Clauses

Your contracts themselves are a critical tool. Every single one, no matter how small, needs explicit language on sanctions compliance. The clauses have to make the other party promise that they, their owners, and their affiliates aren’t on any sanctions list. The contract must also force them to tell you immediately if that ever changes. And most importantly, you need a clause that lets you terminate the contract right away, with no penalty to you, if they get hit with a sanctions designation. This gives you the clear legal right to walk away from a sanctioned partner immediately, which cuts off your exposure.

For example, a clause might state: “The Contractor represents and warrants that neither the Contractor, nor any of its directors, officers, or beneficial owners, is a person or entity that is, or is owned or controlled by, a person or entity that is (i) the subject of any sanctions administered or enforced by the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC), the United Nations Security Council, the European Union, His Majesty’s Treasury, or other relevant sanctions authority (collectively, ‘Sanctions’), or (ii) located, organized, or resident in a country or territory that is the subject of complete Sanctions. The Contractor agrees to immediately notify the Company if any such representation or warranty ceases to be true.”

4. Conduct Ongoing Monitoring and Periodic Rescreening

Sanctions lists change constantly. People are added and removed almost daily. A single check when you sign the contract isn’t nearly enough. You have to have a process for ongoing monitoring. The good screening software platforms offer this as a feature. They’ll automatically re-check your list of partners against any updates and alert you to new hits. If you don’t have that automated, you have to create a manual schedule. For your high-risk partners, check them quarterly. For low-risk ones, like a local cleaning service, rescreening their owners once a year is probably fine.

Pro Tip: Bake sanctions checks into your vendor management workflow. When a vendor’s contract is up for renewal, or if they tell you they have new owners, that should automatically trigger a rescreen. This makes compliance a standard part of how you operate, not some extra chore.

5. Document Everything and Maintain Audit Trails

Regulators want to see your work. For every screening you do, you need a detailed record. Log the date and time, the exact names you searched, which lists you checked, the search settings you used, and what came back (even if it was “no match”). You also need to record who did the review and what they decided. Keep all of it stored securely for at least five years which is the standard requirement from bodies like OFAC. When an auditor or investigator shows up, this documentation is your shield.

Screenshot Description: An example of an audit log within a compliance software, showing columns for “Date of Search,” “Entity Name,” “Sanctions List(s) Checked,” “Result,” “Reviewer,” and “Decision.” A green “Cleared” status is visible for most entries, with one yellow “Potential Match – Under Review.”

Common Mistake: Saving results all over the place or just scribbling notes. Don’t do it. You need a central, tamper-proof system for all your documentation. This can be inside your screening software or in a dedicated compliance platform. The whole point is to be able to pull up the complete due diligence history for any partner at a moment’s notice.

6. Train Your Team Regularly

Your software is only as good as the people running it. You have to run regular, mandatory training for everyone involved in contracts, onboarding new vendors, and processing payments. This isn’t optional. The training needs to cover the basics of what sanctions are, the specific ways your business could be exposed, how to actually use your screening tools, and what to do when you get a potential match. Because sanctions rules are always changing, an annual refresher is the bare minimum. Make the training real by using mock scenarios and case studies that are relevant to your business.

For example, if your studio hires international photographers for shoots, the person signing that contract needs to know how to screen them, but they also need to know how to check their bank details to make sure the payment isn’t going through a sanctioned bank. Understanding the payment chain and intermediary banks is a huge deal. A U.S. Treasury enforcement action in late 2025 drove home the point that you have to “know your payment chain,” not just your customer, for international deals. For more on avoiding these problems, check out our guide on 4 Steps to Avoid 2026 Breaches.

Getting through the sanctions maze takes a structured process and constant watchfulness. When you combine tiered vetting, good screening tech, solid contract language, continuous monitoring, disciplined record-keeping, and regular training, you build a real defense against some serious financial and reputational pain. Doing this stuff protects your business. It also shows you’re serious about operating ethically in a world where everyone’s watching. To understand more about the market-wide effects, you can read about how the Sanctions Surge Hits Studios.