BP-POL-002

Third-Party Due Diligence & Sanctions Compliance Policy

Risk-based onboarding, ownership checks, screening, approval and ongoing monitoring

Version 1.0Status: Approved2026
Blue Palm knows who it does business with, understands the real risk and stops transactions that may breach sanctions or integrity requirements.

Purpose and scope

The policy establishes a practical, risk-based process for knowing suppliers, customers, agents, consultants, logistics providers, banks and other counterparties; identifying integrity, sanctions, ownership and human-rights risk; and taking documented decisions before and during a relationship.

Baseline due diligence

Blue Palm verifies legal identity, registration, addresses, authorised signatories, direct and ultimate beneficial ownership, bank details, relevant licences and certifications, sanctions exposure, reputation, commercial rationale, payment terms and proposed subcontractors.

Enhanced due diligence

Additional review is required where there is public-sector or PEP exposure, use of intermediaries or success fees, conflict-affected routes, opaque ownership, unusual payment instructions, adverse allegations or indicators of bribery, fraud, forced labour, child labour, trafficking or sanctions evasion.

Risk tiers and review

Standard relationships are refreshed at least every three years; elevated relationships at least every two years; high-risk relationships at least annually and before material transactions. Prohibited or unresolved relationships must not be onboarded, paid or transacted with.

Sanctions compliance

At minimum, Blue Palm screens relevant parties against the UN Consolidated List and, for UAE activities, the UAE Local Terrorist List and applicable implementation requirements. Other EU, UK, US or relevant lists are checked when required by law, contract, bank, insurer, currency, goods, route or risk assessment.

Stop and escalate

A possible sanctions match or prohibited activity requires an immediate documented hold. Personnel must not release goods, make or return payments, tip off the affected party or restructure the transaction to avoid a restriction. Compliance verifies the match and obtains specialist advice where needed.

Contracts, payments and reporting

Written contracts must describe the real goods or services and include relevant compliance, audit and termination controls. Payments require verified delivery, valid invoices and verified bank details. Red flags must be stopped and reported; good-faith reporters are protected.

This webpage is a public-facing presentation of the supplied policy. The downloadable English document remains the controlled source for the complete policy, including appendices and internal forms.