Screening lists

Settings → Screening lists, needing screening_configuration.view to read and screening_configuration.manage to change.

The watchlists that sanctions and PEP screening is run against. A subject is only checked against the lists named here — nothing is searched by default.

Why this screen exists

Screening providers search the lists a request names and no others. Send none, and the response comes back with a parsed body, a query status, and an empty match array — the same shape a genuinely clean subject produces. Nothing downstream can tell the two apart, because by the time the normalizer sees it the difference is gone.

So Verity refuses to screen against an empty selection. A subject type with no list behind it does not produce a quiet clean result; the check fails, the sanctions gate reads not assessed, and approval stays blocked.

An empty selection is not a clean result

This is the one place where "we found nothing" and "we searched nothing" look identical on the wire. Reporting the second as the first is the failure this product exists to avoid.

Configuring a list

Each list needs a name, its UUID from the provider, and which subject types it applies to.

Field	Notes
Name	How the list is named on evidence and in the audit trail. Use the provider's own name — a reviewer reading a match should recognise it
List UUID	Issued by the provider. Copy it; a wrong UUID is not rejected, it simply searches nothing
Provider	focal today
Screens	Individuals, organizations, or both

Most providers issue separate lists per subject type — a terrorist list usually has an Individuals edition and an Entities edition, and they are different UUIDs. A combined list such as Dow Jones is sent for both.

A wrong UUID fails silently

The provider does not reject a UUID you have not licensed or have mistyped. It returns nothing, which looks exactly like a clean subject. Copy from the provider's own console rather than typing.

Coverage

The screen tells you when a subject type has nothing behind it:

Screening cannot run — No list is configured for organizations. Screening those subjects will fail rather than return an empty result, and any review that needs it will stay unapprovable until a list is added.

Both individuals and organizations need their own coverage. Organization screening runs against the merchant; individual screening runs against owners and authorized signatories. Covering one leaves the other unscreenable.

Removing a list

Removing narrows what every future screening searches. Past runs are untouched — evidence already collected records the lists it was collected against — but nothing is re-screened automatically. If a list is removed in error, add it back and re-run the affected checks.

Every change is written to the audit trail: which list, which subject types, and who changed it. That is the record an examiner asks for when they want to know what you were screening against on a given date.

Licensing

Which lists you may search is a commercial question between you and the provider. A UUID you have not licensed returns nothing rather than an error, so a list appearing here is not evidence that it is actually being searched — confirm entitlement with the provider.