Check a name against the SECO, OFAC SDN and EU sanctions lists, without showing us the name.
Exact matches only (after normalisation). “Not on the lists” does not mean “not sanctioned”.
Your browser encrypts the name; TAIA's service compares it without decrypting it and does not store it. Full notice: taia.ch/privacy/ (section 6b)
Computed by TAIA's service; your browser cannot verify the answer.
Your browser encrypts the name; TAIA's service compares it without decrypting it and does not store it. Full notice: taia.ch/privacy/ (section 6b)
What left your browser?
This test shows that the name does not leave your browser in readable form, in the patterns and layers listed. It does not show that the encryption cannot be broken; the protocol has had no independent cryptography review. Inside the encryption, the name is reduced to a fixed number; anyone who could decrypt it could compare that number with names they guess.
The requests that were sent
What the service does see
It sees that a check arrived, when, and its size; and your network address, as every web server does.
Your network address is not shown here: your browser does not know which address the service sees. Your browser also adds its usual headers to each request (for example its type and language); this panel searches only the headers the page sets, not those your browser adds. The Network tab shows them all.
Like any web request, a check passes through TAIA's web entry point, which logs, for every request, your network address and client port, the host and path requested, the method, the status, the duration, the size and the TLS version, without request headers (privacy notice, section 4), for up to 30 days, in Switzerland (Google Cloud europe-west6), to deliver the service and protect it against misuse, and then deletes them.
For experts
Open your browser's developer tools (F12; on a Mac Cmd+Option+I), choose the Network tab and run a check. The same requests appear there, with their address and size. This panel is part of the page's own code and is not independent proof; the Network tab is your own check. A copy of the encrypted request stays in this tab's memory until your next check; the key that made it is deleted as soon as the answer is read.
About TAIA Confidential Screening
How TAIA agents work
An agent is one step of TAIA’s software with a named task; none of them decides for you.
- Guardian agent Encrypts the name in your browser; the key stays there
- Specialist agent Compares the encrypted name with the lists
In TAIA Atelier, a demo on synthetic cases, the same pattern runs a client-onboarding case: each step passes under fixed gates and a person decides where a review is required. A low-risk case can go to the record without a review.
How it worksLocked in your browser, compared while encrypted, opened only by you.
Your browser encrypts the name. TAIA’s service compares it with the Swiss SECO list, the OFAC SDN list and the EU consolidated list without decrypting it, and only your browser can open the answer. No login. 10 free checks a day.
- Your browser encrypts the name. It makes a fresh key for each check, turns the name into a number and encrypts it with homomorphic encryption (BFV). The key never leaves this tab.
- The service compares without decrypting. TAIA’s service in Zurich computes on the encrypted number with the three lists and sends back an encrypted answer. It holds no key that could open the name or the answer.
- Your browser opens the answer. It tells you which list, if any, has the name, and then discards the key.
Lists: SECOOFAC SDNEU list
Technical details
Built on Microsoft SEAL 4.1.2 (MIT licence), compiled to WebAssembly via node-seal 7.0.0 (the service: SEAL 4.7.2, from 2 November 2026); parameters: BFV.
Microsoft SEAL is a trademark of its owner; TAIA is not affiliated with Microsoft.
Code fingerprint (SHA-256): screeningCheck-CAOWg7zp.js 54c00a34103a1c2b723fc35592d8c4dcb49e9376ba4db942cba228620dc92c57; index_throws-BJTczikb.js 9282cf5177191e675d809d6d06fa7cb0affeb9a289ba4d75d55d94a2ddbbc22a; seal_throws-C-IzQ_Lp.wasm b30d3776265a56373a2001d2cd48baa8d72ddd571e04ddfaefd4c231271170e4; commit e0739f4bd6d34822aee613a9ca52e4288ed1c064. JSON
LimitsWhat the check does, and what it does not.
Exact matches only (after normalisation). UN Security Council designations are included to the extent they are implemented in the Swiss and EU lists; the UN list itself is not a separate list in this service. “Not on the lists” does not mean “not sanctioned”.
Your browser encrypts the name; TAIA's service compares it without decrypting it and does not store it.
What it checks
- Every primary name and alias on the Swiss SECO list (its Latin-script spellings), the OFAC SDN list and the EU consolidated financial sanctions list.
- Exact matches after normalising capital letters, accents, punctuation and word order; spelling variants are not found.
- The lists as of the snapshot date shown on this page.
What it does not
- UN Security Council designations are included to the extent they are implemented in the Swiss and EU lists; the UN list itself is not a separate list in this service.
- Dates of birth, nationalities or other identifiers.
- A possible match is not a decision; you decide. This does not replace a full screening tool.
- The protocol has had no independent cryptography review.
TAIA has switched off interactive access to the Screening service's machines for every account, including its administrators; an attempt is refused and recorded. The owners of TAIA's Google Cloud project can lift this or open an emergency path; a change to that setting is recorded in Google Cloud's admin log. The key that opens the encrypted connection remains readable to TAIA's administrators; the key that could decrypt a name never leaves your browser.
Details
- Exact matches after normalising capital letters, accents, punctuation and word order; spelling variants are not found. “José O’Neil-Pérez” and “PEREZ, Jose ONeil” are the same name; “Jose Perez” or “Josef O’Neil” are not. Names in other scripts are compared as written for the OFAC and EU lists. For the Swiss SECO list, only the spellings in Latin script are compared; its Cyrillic and Arabic spellings are not. A name written in another script may therefore be on the Swiss list and not be found.
- Three lists: the Swiss SECO list, the OFAC SDN list and the EU consolidated financial sanctions list, with every primary name and alias (for the SECO list, its spellings in Latin script). UN Security Council designations are included to the extent they are implemented in the Swiss and EU lists; the UN list itself is not a separate list in this service. More lists may follow.
- The lists are a snapshot, not live:
- Only names. Dates of birth, nationalities and other identifiers are not compared.
- A name on none of the lists can still match by chance.
- A possible match is not a decision; you decide. This does not replace a full screening tool.
- The protocol has had no independent cryptography review. It does not hide the size of the lists, or how many checks are made and when. That the service does not see the name holds for this page’s code as TAIA serves it: TAIA serves both this page and the service.
How your data is handled
Your browser encrypts the name before it leaves your device; TAIA's service compares only the encrypted form, holds no key to decrypt it, does not learn whether anything matched, and does not store or log the names you check. This holds for the page's code as TAIA publishes it; TAIA serves both the page and the service. To count the free checks, the service keeps a keyed hash of your network address, in memory only, replaces it with the first check after 00:00 UTC, and never writes it to disk or logs; TAIA's web entry point logs network addresses for up to 30 days in Switzerland. For paid plans, Stripe handles the payment and TAIA keeps your billing and contact details for its accounting records. Contact: info@taia.ch.
PrivacyWhat the service sees.
What the service does see: that a check arrived, when, and its size; and your network address, as every web server does. To count the free checks it keeps only a keyed hash of the address, in memory, until 00:00 UTC (less than 24 hours); the check service does not store or log the address. TAIA’s web entry point logs network addresses for every request, for up to 30 days, in Switzerland. With an access key the service counts the checks of that key. This page sets no cookie and writes nothing to browser storage.
Terms of useInformation service; not legal advice; you remain responsible for your decisions.
TAIA Confidential Screening: terms of use. Version 1.3.1, 4 November 2026. TAIA GmbH, Seestrasse 353, 8038 Zürich, Switzerland, UID CHE-189.956.337 ("TAIA"), info@taia.ch.
How you accept these terms. For the free checks, you accept them by clicking "Check name"; the link to these terms is shown next to that button. For a paid plan, you accept them by ticking the box at checkout before you pay. You can save or print these terms from this page.
- What it is. An information service: it tells you whether a name you enter appears, after the normalisation described in section 4, on the sanctions lists named in section 3. It is not legal advice, not a compliance assessment and not a decision. You decide what to do with an answer and remain responsible for your own legal and regulatory obligations, including any sanctions screening you must carry out.
- For business use only. Paid plans are for business use only. The service is offered to businesses and professionals, for use in their trade, business or profession. It is not offered to consumers. When you buy a plan, you confirm that you buy it for that purpose and give the name of your business at checkout. If you nevertheless use the service as a consumer, the mandatory protections of the law that applies to you remain unaffected (section 12).
- The lists. The service uses three lists, with every primary name and alias they contain:
- the Swiss sanctions list: the consolidated list of the annexes to the federal sanctions ordinances, published by the State Secretariat for Economic Affairs (SECO). Source: SECO, Switzerland;
- the Specially Designated Nationals and Blocked Persons List (SDN List) of the U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), a work of the U.S. Government;
- the consolidated list of persons, groups and entities subject to EU financial sanctions, published by the European Commission (Financial Sanctions Files, XML 1.1), reused under the European Commission's reuse policy. Source: © European Union.
TAIA changes the format only: it keeps the names and normalises them as section 4 describes. Only the texts published in the annexes to the federal sanctions ordinances in the Official Compilation of Federal Legislation, by OFAC, and in the Official Journal of the European Union are authoritative; SECO, OFAC and the European Commission are not connected with this service and do not endorse it. The page shows the publication date of each list. The lists are built into the service and are updated when TAIA releases a new version of it, not continuously; a list can change after the date shown. Because the encrypted comparison works on a short code computed from each normalised name, a name that is not on a list can still produce a match by chance. After a check, the result's details show, for each list and for all lists together, how often this happens on the current lists (for example "1 in N checks"); the figures change when a list changes. UN Security Council designations are included to the extent they are implemented in the Swiss and EU lists; the UN list itself is not a separate list in this service. No other list is included.
- How it matches. Before the comparison, the name is normalised, in your browser and in the service alike: Unicode compatibility decomposition (NFKD); accents and other combining marks removed; lower case; the letters ß, æ, œ, ø, ł, đ, ð, þ, ı, ħ and ŧ written as ss, ae, oe, o, l, d, d, th, i, h and t; apostrophes removed; every other character that is not a letter or a digit treated as a space; the words sorted. So capital letters, accents, punctuation and word order do not matter. Any other difference does: a missing or extra word, a different transliteration, a typo or a spelling variant is not found. Names in other scripts are compared as written for the OFAC and EU lists. For the Swiss SECO list, only the spellings in Latin script are compared; its Cyrillic and Arabic spellings are not. A name written in another script may therefore be on the Swiss list and not be found. A match means that a name or alias on a list, normalised the same way, is identical to your normalised input. "Not on the lists" therefore does not mean that a person or company is not sanctioned. "Possible match" means the same written name appears on a list, not that it is the same person; it can also be a chance match of the encrypted comparison, which is rare; the page shows the current chance-match figures for the lists in use. Review every possible match against the official list before you act. The service does not replace a full screening tool.
- No guarantee. TAIA does not guarantee that the lists are complete, correct or current, that every listed name is found, or that the service is available at any given time. The encryption protocol is TAIA's own and has not yet had an outside cryptography review. The answer is computed by TAIA's service. Your browser cannot check that it was computed correctly: a fault in the service, or a change made to it, would show a wrong answer, including a wrong 'no match'. The encryption protects the name you enter; it does not prove the answer.
- Your use. You may check a name only if you have a lawful reason to do so; you are responsible for the personal data of the people whose names you check. You must not: attack, overload or probe the service without TAIA's written consent; get around the free limit (for example by changing network addresses automatically); share, resell or publish an access key; or use the service to build or sell a list or a competing service. You use the service through the page as TAIA serves it, one name per check. You must not change the page's code or send your own queries to the service without TAIA's written consent. A query that carries more than one name counts as one check for every name it carries, against your plan and its daily limit, and TAIA may block the key under this section. You must not use the service if you are yourself a person or entity named on a sanctions list, or act for one. TAIA may block an access key or a network address that is used against this section; in that case section 7.5 (refunds) does not apply.
- Plans, prices and access keys.
- Free: 10 checks per day per network address, counted until 00:00 UTC. Several people behind the same network address share these 10 checks. TAIA's web entry point also limits requests per address.
- Monthly: CHF 49 per month for up to 1,000 checks per month, for one named user. Paid in advance each month through Stripe; it renews each month until you cancel. You can cancel at any time, effective at the end of the month already paid. You cancel in the Stripe customer portal (sign in with the e-mail address used at checkout) or by e-mail to info@taia.ch. Checks not used in a month do not carry over.
- 12-month plan: CHF 250 for a 12-month plan with up to 10,000 checks, paid once in advance. The plan ends 12 months after purchase or when 10,000 checks are used, whichever comes first.
- Daily limit: each access key has a daily limit, which the page shows when you use the key; it resets at 00:00 UTC. The plan's volume is counted over its period. TAIA counts the plan's checks from the usage log at least once a week and may switch off a key that has used its plan volume; it tells you by e-mail. Checks made beyond the plan volume before that are not charged.
- Refunds: an access key gives access at once, so payments are not refunded once the key has been used for a first check (for the monthly plan: for the month already paid). A key that has not been used for any check is refunded in full if you ask within 14 days of purchase. If TAIA ends the service, or ends or blocks your plan for a reason other than section 6, before the end of the paid period, TAIA refunds the unused part pro rata.
- Prices and receipts: Prices are in CHF. No VAT is charged: TAIA GmbH is not registered for Swiss VAT. If TAIA becomes liable for Swiss VAT, prices for purchases made from that date include it. Stripe sends the payment receipt; TAIA sends your access key by e-mail to the address given at checkout, within two business days.
- Keys: an access key is for one named user: the person who buys it, unless you name a different user when TAIA delivers the key (reply to the key e-mail). Keep it secret: it is sent with the request and used in this browser tab only; TAIA's service stores only a hash of your key; TAIA deletes the e-mail that delivered the key from its own mailbox after sending. If you lose it, write to info@taia.ch from the purchase e-mail address and TAIA issues a new key and blocks the old one.
- What TAIA processes. Your browser encrypts the name before it is sent. TAIA's service receives only the encrypted query, compares it in that form and holds no key to decrypt it; it does not learn whether anything matched: only your browser learns the answer. TAIA does not store or log the names you check or the answers. This holds for the page's code as TAIA publishes it; TAIA serves both the page and the service. To count the free checks, the service keeps only a keyed hash of your network address, in memory only, replaces it with the first check after 00:00 UTC, and never writes it to disk or logs; the check service itself does not store or log the address. TAIA's web entry point logs network addresses for every request, for up to 30 days, in Switzerland. With an access key, the service counts the checks made with that key under TAIA's identifier for the key and keeps one counting line per check (time, route and method, result status, plan and key identifier, duration; no name, no address) for up to 13 months (396 days), for plan accounting. For up to 30 days, while the entry point's log exists, TAIA could link a key's checks to the network address they came from by their time; TAIA does this only to investigate misuse under section 6. For paid plans, TAIA processes the billing and contact details needed to deliver the key and keep accounting records. Details: privacy notice, section 6b (taia.ch/privacy/).
- Liability. TAIA is liable without limitation for damage caused intentionally or by gross negligence. For slight negligence, TAIA's total liability for all claims arising from the use of the service is limited to the fees you paid to TAIA in the 12 months before the event that caused the damage; for the free checks, TAIA is liable only for intent and gross negligence. Within this limit, TAIA is not liable for indirect or consequential loss, lost profit, or fines and penalties imposed on you. The same limits apply to the people and subcontractors TAIA uses to provide the service. Mandatory law that provides otherwise remains reserved.
- Changes to the service. TAIA may change, suspend or end the service or the free checks, and updates the lists with new releases. For a paid plan, TAIA tells you at least 30 days before ending the service, except for urgent technical or legal reasons; section 7.5 applies.
- Changes to these terms. TAIA may change these terms and publishes the new version on this page with its date. For a plan already paid, the version in force at purchase applies until the end of the period already paid.
- Law and courts. Swiss law applies, without its conflict-of-law rules. The exclusive place of jurisdiction is Zürich, Switzerland. If, despite section 2, you are a consumer, you keep any right that mandatory law gives you to sue and be sued at your place of residence, and the protection of the mandatory provisions of the law of your residence.
- Contact. TAIA GmbH, Seestrasse 353, 8038 Zürich, Switzerland · info@taia.ch
TAIA GmbH, Seestrasse 353, 8038 Zurich. The German text of this page is a translation.