I've got a new U.S. SaaS company, and want to make sure we don't break U.S. Sanction law by selling to individuals, IPs, or countries that the U.S. will get upset about.
Has anyone found a solution to this?
In banking we gather owner information of businesses in our KYC processes and do OFAC checks using their data. It's an extremely high false positive type process, where if we get a matching name we ask them for further documentation that they're not the person on the SDN list and proceed on the basis of that documentation.