Counterparty screening

Is your counterparty on any list?

Records, sanctions, debts to the state and restrictive lists for a company or its legal representative, each from the entity that keeps it. Four countries, one key and a definitive answer when there is nothing.

Try it now

Free, no signup. The same query the API returns.

Colombia fiscal liability check

Open the full tool

No dots, spaces or commas. 3 to 30 characters; letters and hyphens are allowed for passports and foreign documents.

No single list tells the whole story, and each one answers a different question

In Colombia the records are split across four entities: the Policía Nacional records judicial requirements, the Procuraduría keeps the SIRI with sanctions and disqualifications, the Contraloría publishes the Boletín de Responsables Fiscales and the Contaduría the Boletín de Deudores Morosos del Estado. SECOP adds the sanctions on state contractors and the Registraduría says whether the cédula is still valid. In Peru the Tribunal del Servicio Civil rules on the appeals of sanctioned public servants. In Brazil the CGU publishes the companies declared inidôneas and punidas, the MTE the lista suja of slave labor, IBAMA its environmental embargoes and PGFN the debt enrolled in the Dívida Ativa da União. In the United States OFAC publishes the parties you cannot do business with.

Croma queries each registry with what you already have, the cédula, the NIT, the CNPJ or the name, and returns the verdict exactly as the source certifies it, with its date and its provenance. A NIT opens the SIRI, SECOP and the BDME; the legal representative's cédula, the Policía, the Contraloría and the Registraduría. Lookups on individuals require a legitimate purpose under Ley 1581 de 2012 and its equivalents; Croma delivers the record and the legal basis is yours.

How it works

From the question to the JSON in three steps

  1. 01

    Send the identifier or the name

    A cédula or a NIT in Colombia, a CNPJ or a name in Brazil, a name or alias at OFAC. Each endpoint declares in the OpenAPI what it accepts, and the same document works for several lists at once.

  2. 02

    Receive the verdict from each list

    Every answer says whether there are entries or not, the exact wording the source certifies with, the date and time of the query and, where it exists, the detail: SIRI number, sanctioning resolution, OFAC program or amount of the fine.

  3. 03

    Cross the signals and decide

    A party held fiscally liable cannot contract with the state; neither can a delinquent debtor, until it pays; a party designated by OFAC stops the transaction. Each signal arrives from its entity, with provenance, ready for the file.

Sources

What you send and what you get

Each row is an API endpoint. The input is what your system already holds; the output, the fields the official registry returns.

Colombia· 6 endpoints

Colombia: Policía, Procuraduría, Contraloría, Contaduría, SECOP and Registraduría

Everything about Colombia

Four records by cédula, queried at the official source at the moment of your request: the judicial requirements of the Policía Nacional, the Procuraduría's SIRI (which also accepts a NIT), the Contraloría's Boletín de Responsables Fiscales and the Contaduría's Boletín de Deudores Morosos del Estado, with its two verdicts under Ley 901 de 2004 and Ley 1066 de 2006. SECOP adds the sanctions on contractors by document or by search, and the Registraduría confirms whether the cédula is valid or cancelled by death.

  • Colombia fiscal liability check

    Contraloría

    You send
    Document number
    You get

    Document type · Document type name · Document number · Reported as fiscally liable and 4 more

    LiveTry
  • Colombia disciplinary record check

    Procuraduría

    You send
    Document number or NIT
    You get

    Record type · SIRI number

    LiveTry
  • Colombia state delinquent debtors check

    Contaduría

    You send
    Document number or NIT
    You get

    Reported · Message

    LiveTry
  • Colombia criminal record check

    Policía Nacional

    You send
    Document number
    You get

    Document type · Document type name · Document number · Full name and 3 more

    LiveTry
  • Search SECOP contractor sanctions

    SECOP

    You send
    SearchProvider documentEntity NIT
    You get

    Id · Entity · Entity NIT · Entity level and 4 more

    DatasetDocs
  • Check a Colombian cédula

    Registraduría

    You send
    Document number
    You get

    Document number · Status

    LiveTry
Peru· 2 endpoints

Peru: Tribunal del Servicio Civil

Everything about Peru

The Tribunal del Servicio Civil, a body of SERVIR, rules as the final administrative instance on public servants' appeals over disciplinary sanctions, dismissal and other matters of the civil service regime. Croma answers from the dataset it keeps current with the whole source: you search by text and receive each resolution with its number and date, and by identifier the full resolution. It is the source for knowing whether a public official or former official carried a sanction before you hire or onboard them.

  • Search Tribunal del Servicio Civil resolutions

    Tribunal del Servicio Civil

    You send
    SearchChamberResolution number
    You get

    Id · Resolution number · Resolution year · Chamber and 4 more

    DatasetDocs
  • Look up a Tribunal del Servicio Civil resolution

    Tribunal del Servicio Civil

    You send
    Resolution id
    You get

    Id · Resolution number · Resolution year · Chamber and 4 more

    DatasetDocs
Brazil· 7 endpoints

Brazil: CGU, MTE, IBAMA and PGFN

Everything about Brazil

Four federal lists served from the dataset Croma keeps current with the whole source. The CGU publishes the companies declared inidôneas or suspensas (CEIS) and those punished under the Lei Anticorrupção (CNEP). The MTE maintains the Cadastro de Empregadores, the lista suja of trabalho escravo. IBAMA lists environmental embargoes with area and offender. PGFN publishes the debt enrolled in the Dívida Ativa da União. Search by CNPJ or name and detail by identifier, with the LGPD as the framework when the record identifies a person.

  • Search CGU sanctions

    Controladoria-Geral da União (CGU)

    You send
    Name or registered nameCNPJ or CPFRegister
    You get

    Identifier · Register · Sanction code · Party type and 21 more

    DatasetTry
  • Look up a CGU sanction

    Controladoria-Geral da União (CGU)

    You send
    Sanction identifier
    You get

    Identifier · Register · Sanction code · Party type and 24 more

    DatasetTry
  • Search the MTE lista suja

    Ministério do Trabalho e Emprego (MTE)

    You send
    Name or registered nameCNPJ or CPFList
    You get

    Identifier · List · Party type · Document type and 12 more

    DatasetTry
  • Look up a lista suja listing

    Ministério do Trabalho e Emprego (MTE)

    You send
    Listing identifier
    You get

    Identifier · List · Party type · Document type and 13 more

    DatasetTry
  • Search IBAMA environmental embargoes

    IBAMA

    You send
    Name or propertyCNPJ or CPFEmbargo status
    You get

    Identifier · Term number · Term series · Embargo status and 22 more

    DatasetTry
  • Look up an IBAMA environmental embargo

    IBAMA

    You send
    Embargo identifier
    You get

    Identifier · Term number · Term series · Embargo status and 22 more

    DatasetTry
  • Search debts in the Dívida Ativa da União

    Procuradoria-Geral da Fazenda Nacional (PGFN)

    You send
    Company nameCNPJ or CNPJ rootRegime
    You get

    Identifier · Regime · Registration number · CNPJ and 15 more

    DatasetTry
United States· 2 endpoints

United States: OFAC

Everything about United States

The Treasury's Office of Foreign Assets Control publishes the Specially Designated Nationals and Blocked Persons list and the consolidated list of its other sanctions programs. Croma searches both at once, over the primary name and every alias, and returns the programs, the party type, the addresses and the remarks where OFAC notes documents and dates of birth. The dataset is updated every day: a party removed from the list stops appearing that same day. By id, the party's full record.

  • OFAC sanctions search

    OFAC Sanctions

    You send
    Name or aliasListType
    You get

    Id · Name · Type · Sanctions programs and 3 more

    DatasetTry
  • OFAC sanctioned party lookup

    OFAC Sanctions

    You send
    OFAC id
    You get

    Id · List · OFAC number · Name and 9 more

    DatasetTry

Three possible answers

  • 01

    Found

    The record exists and arrives structured, with the fields in the table and the source that produced it.

  • 02

    No record

    The source has nothing for that identifier. It is a definitive answer (found: false), not an error.

  • 03

    Pending

    Slow sources return a job with a status_url to poll for the result, or deliver it to your webhook.

Where it runs

Where teams use it

  • Procurement and suppliers

    Before onboarding a supplier, check the NIT in the SIRI, SECOP and the BDME, and the representative's cédula with the Policía and the Contraloría. Repeat the query every time you renew the contract.

  • Loan origination

    A delinquent debtor to the state or a party with a final fiscal liability ruling changes the analysis before disbursement. The query runs alongside the business verification, on the same key.

  • Contracting with the state

    The certificates a public entity reviews before awarding a contract or appointing an official, Policía, Procuraduría, Contraloría and Contaduría, plus prior sanctions as a contractor in SECOP, on the same key and bidder by bidder.

  • Compliance and foreign counterparties

    A compliance officer checks OFAC by name and alias, the CGU and the lista suja by CNPJ, and receives the provenance of every result. From Claude or ChatGPT over MCP, the same query in plain language.

Trust

Official records, with provenance

  • Official sources only

    Every answer names the official registry that produced it. Nothing comes from purchased databases or third-party summaries.

  • Results that are never indexed

    In the free tools the query and the result live in your browser, never in a URL. In the API: encryption in transit, access control and audit logging.

  • Personal data, with rules

    Lookups on individuals require a legitimate purpose under each country's law: Ley 1581 in Colombia, LFPDPPP in Mexico, Ley 29733 in Peru, LGPD in Brazil. Croma delivers the record; the purpose and the legal basis are yours.

  • A stable contract

    Every field is documented in the OpenAPI, with a 90-day deprecation policy and Deprecation and Sunset headers before anything is retired.

Customers
IncomercioBanco Finandina

Frequently asked questions

Each one answers a different question. The Policía reports whether there are pending judicial requirements. The Procuraduría certifies the entries in the SIRI: disciplinary, criminal, contractual, fiscal and loss of investiture. The Contraloría says whether there is an unpaid final fiscal liability ruling. The Contaduría, whether there is an overdue debt to a public entity. Being clear in one does not mean being clear in the others; that is why all four are queried.

Yes, with a legitimate purpose. The four Colombian registries are public and are queried by cédula, but Ley 1581 de 2012 requires the purpose to be proportionate: hiring, contracting, credit. The same applies under Ley 29733 in Peru and the LGPD in Brazil. Croma runs the query against the official source and returns the record; the legal basis and the data subject's authorization, where it applies, are yours. In the free tools nothing is left in a URL.

With two identifiers on the same key. The NIT opens the Procuraduría's SIRI, the sanctions as a contractor in SECOP and the Boletín de Deudores Morosos; the representative's cédula, which RUES returns, opens the Policía, the Contraloría, the Registraduría and the SIRI again. In Brazil the CNPJ runs through CGU, MTE, IBAMA and PGFN. Every answer names its source, so the file is assembled record by record.

Every day. The dataset Croma keeps current with the whole source incorporates the designations and removals OFAC publishes, and a party that leaves the list stops appearing that same day. The search covers the SDN list and the consolidated list at once, over the primary name and every alias, and each result carries the programs it was designated under.

A definitive answer, not an error. In the Colombian records you receive the negative verdict with the exact wording the source issues, the date and time of the query and, at the Contraloría, the certificate's verification code. In the search lists (OFAC, CGU, lista suja) a name with no matches returns an empty list, and in lookups by identifier, found: false.

Each query is an independent HTTP call, so periodic re-verification is a scheduled job on your side that walks your supplier base with the same key. Slow sources return a pending job with a status_url or deliver the result to your webhook. Every answer carries the date of the query, which is what audit needs to prove when each party was checked.

Check every counterparty before you sign

Records, sanctions, debts to the state and restrictive lists from Colombia, Peru, Brazil and the United States with one API key, every answer with the entity that certifies it.