Build or Buy Restricted-Party Screening for Shopify Orders?
Export controls and restricted-party screening on Shopify is a CUSTOMIZE decision: no Shopify app screens orders against OFAC, BIS or Treasury lists, so you license a trade-compliance API such as Descartes (quote-only) and build the integration that holds fulfillment on a match. That integration runs $15,000–$40,000 (Deploi estimate, illustrative). All 26 apps in the App Store's Security and Legal category are fraud filters, cookie banners and accessibility widgets.
Your profile — see how the verdict shifts
- Confidence
- High — Checked all 26 apps in the App Store's Security and Legal category: fraud and chargeback filters, cookie banners, EU withdrawal buttons and accessibility widgets, and nothing that matches orders against OFAC, BIS or Treasury lists. Descartes, the real vendor, has no listing (two candidate slugs 404) and publishes no price. The integration is the work either way
- Reference scenario
- $20M–$100M GMV · US-based merchant · 10–30% international orders · no screening step today · agency dev bench · compliance counsel on retainer
- As of
- September 2026
Decision at a Glance
| Your profile | Verdict | Why |
|---|---|---|
| Under 2% international orders | WAIT | Document a manual monthly check of international ship-to names against the published government lists; it takes an hour, it is a written procedure, and it is the floor rather than zero. |
| 2–10% international, under 1,000 international orders a month | BUILD | A matcher against the free OFAC and BIS list downloads, run on every order and holding fulfillment on a hit, is a $15,000–$35,000 build (Deploi estimate, illustrative); get compliance counsel to sign off the match thresholds first. |
| 10–30% international, or any regulated goods | CUSTOMIZE | A screening API (Descartes, quote-only) carries list maintenance, fuzzy matching and the audit log; the Shopify integration that holds and releases fulfillment is yours to build, $15,000–$40,000 (Deploi estimate, illustrative). |
| Controlled or dual-use products, or 30%+ international | BUY | Export classification, license management and denied-party screening belong in one trade-compliance platform (Descartes and peers, quote-only); the Shopify side is an order feed and a fulfillment hold, and the screening decision never lives in Shopify. |
What Export controls and restricted-party screening Actually Drives
| Outcome | Impact | How it works |
|---|---|---|
| Data & insight | High | A decision log per order (lists checked, match score, reviewer, outcome) is the evidence a regulator asks for; without it, a clean record is unprovable. |
| Operational efficiency | Medium | Automated screening on order creation replaces a manual name check nobody actually performs, and a fulfillment hold stops the shipment before the label prints rather than after. |
| Revenue — indirect | Medium | A documented screening program is a condition of selling into regulated categories and of some wholesale and marketplace agreements; it keeps international revenue available rather than growing it. |
| Customer experience | Low | Screening runs after checkout and before fulfillment; legitimate customers notice nothing unless a false positive delays a shipment, which threshold tuning minimizes. |
Spend ceiling: Size the spend to the penalty exposure, not to order count. The ceiling is whatever a documented, defensible program costs; below it, a manual monthly check with a written procedure is the floor, and zero screening is not a tier.
What buying enables (top apps)
- + Fuzzy name and address matching across consolidated government lists, with list updates maintained by the vendor (Descartes' published product scope)
- + Export classification and license management in the same platform when controlled goods enter the catalog
- + An audit trail a regulator recognizes, produced by a vendor whose business is producing it
What building additionally unlocks
- + The fulfillment hold itself: an order that matches never reaches the pick list, whichever engine flagged it
- + A decision log in your own systems, joined to the order, the customer and the reviewer
- + Screening at the right moment for your flow: order creation, address edit or B2B company onboarding
- + Escalation routed to your compliance owner in the tools they already use, not a vendor portal nobody opens
Find Your Verdict in 3 Questions
Do you ship internationally, sell controlled or dual-use goods, or take B2B orders from foreign companies?
Yes: Go to question 2.
No: Your verdict: WAIT — document a manual monthly check of any international ship-to names against the published government lists, and revisit when international volume grows.
Do international orders exceed roughly 1,000 a month, or does your catalog include controlled goods?
Yes: Your verdict: CUSTOMIZE — license a screening API (Descartes, quote-only) and build the order-hold integration, $15,000–$40,000 (Deploi estimate, illustrative); no App Store app exists.
No: Go to question 3.
Will compliance counsel sign off on match thresholds you tune yourself?
Yes: Your verdict: BUILD — an in-house matcher against the free OFAC and BIS list downloads with a fulfillment hold and decision log, $15,000–$35,000 (Deploi estimate, illustrative).
No: Your verdict: CUSTOMIZE — the vendor's matching logic is what counsel will accept; keep the integration and the hold in your own hands.
The TCC Scorecard — 12 Dimensions
TCC — Total Cost of Capability: what it actually costs to have this capability over three years, whichever way you get it. Each dimension is scored 0–5 for both paths. How we score →
| Dimension | Buy | Build | Why |
|---|---|---|---|
| Cost | |||
| Acquisition & implementation | Descartes is quote-priced on an enterprise contract and the Shopify integration is a separate 4–8 week build; an in-house matcher on the free lists runs 5–10 weeks (Deploi estimate, illustrative). | ||
| Recurring fees | The screening API bills a quoted annual fee; the government lists are free to download, so the build's recurring cost is upkeep and a nightly refresh job. | ||
| Maintenance & upgrades | The vendor maintains list updates, matching logic and regulatory changes; a built matcher makes you responsible for every list revision and every false-positive retune, at roughly 15–20% of build cost per year (Deploi estimate). | ||
| Switching & exit | Screening history exports from the vendor on contract terms; the built matcher's decision log is yours, and the fulfillment-hold plumbing survives a vendor swap in both cases. | ||
| Risk | |||
| Vendor risk | Descartes is an established enterprise vendor with no App Store dependency; the build has no vendor, but its risk is regulatory rather than commercial. | ||
| Security & compliance surface | A defensible screening program needs documented list currency, match thresholds and audit trails; the vendor supplies all three, while a home-built matcher has to prove them to a regulator on its own. | ||
| Platform-deprecation exposure | Both paths sit on order webhooks and fulfillment holds through the Admin API; quarterly API versions are the shared exposure, and neither touches checkout scripts. | ||
| Value | |||
| Fit to requirement | A screening API does fuzzy name and address matching across consolidated lists with an audit log; a built matcher on exact and near-exact names catches less and explains itself less well. | ||
| Time to market | Vendor contracting adds weeks before the integration starts; the in-house matcher skips procurement but needs counsel to approve thresholds before go-live. | ||
| Performance & scale | Screening is one API call per order, well inside any volume a Shopify merchant ships; list size rather than order count drives the matcher's cost. | ||
| Data ownership & AI-readiness | Screening decisions and their reasons are compliance evidence; the build keeps every decision in your own log, while the vendor keeps it in theirs with export on request. | ||
| Focus & opportunity cost | Sanctions compliance is a legal obligation rather than a differentiator; owning the matching logic is opportunity cost with liability attached. | ||
The App Landscape
| App | Status | Pricing | Best for |
|---|---|---|---|
| Descartes Denied Party Screening | Live — Platform integration; no App Store listing (apps.shopify.com/descartes and apps.shopify.com/denied-party-screening both return 404). Enterprise trade-compliance platform covering denied-party screening, export compliance, export classification and export license management, integrated by API or EDI | Pricing not listed; custom quote from sales (verified Sep 2026) | The screening engine and list maintenance for merchants above roughly 10% international orders or with controlled goods |
| Shopify Security and Legal apps | Category — All 26 apps in the App Store's Security and Legal category are fraud and chargeback filters, GDPR cookie banners, EU withdrawal buttons and accessibility widgets; none matches orders against OFAC, BIS or Treasury lists. Fraud filters score payment risk, which is a different question from sanctions exposure | Tiered or per-order; irrelevant to this decision | Payment fraud, not export controls; do not mistake one for the other |
| Screening integration (API path) | Build lane — An orders/create webhook sends the ship-to and billing party to the screening API, writes the match score to an order metafield and a decision log, places the fulfillment order on hold on a potential match, and routes it to a compliance reviewer for release or cancellation | $15,000–$40,000 one-time plus ~15–20% a year in upkeep, on top of the vendor's quoted fee (Deploi estimate, illustrative) | Every merchant licensing a screening engine; the vendor screens, this build stops the shipment |
| In-house matcher on government lists | Build lane — A nightly job refreshes the free OFAC and BIS list downloads; a normalized name and address matcher with counsel-approved thresholds runs on every order, with the same hold, queue and log as the API path | $15,000–$35,000 one-time including counsel review, plus ~15–20% a year in upkeep (Deploi estimate, illustrative) | Merchants under roughly 1,000 international orders a month whose counsel will sign off on self-tuned thresholds |
The Build Path
- Screen on order creation: An orders/create webhook sends ship-to name, company and address (and the billing party) to the screening API or matcher; the response and match score are written to an order metafield and a decision log.
- Fulfillment hold on a match: A potential match places the fulfillment order on hold through the Admin API before any pick list or label exists; release or cancel follows a reviewer's decision, never an automatic timer.
- Review queue and escalation: Matches route to the compliance owner in email or Slack with the list, the score and the order; every decision is logged with reviewer and reason.
- In-house matcher (alternative engine): A nightly job refreshes the government list downloads; a normalized name and address matcher with counsel-approved thresholds replaces the vendor call for lower-volume merchants.
- Effort band
- $15,000–$40,000 for the screening integration, or $15,000–$35,000 for an in-house matcher — Deploi estimate (illustrative); lands in the $10–25K or $25–75K contact-form band
- Typical timeline
- 4–8 weeks for the API integration after the vendor contract; 5–10 weeks for an in-house matcher including counsel review (Deploi estimate, illustrative)
- Maintenance, honestly
- ~15–20% of build cost per year (Deploi estimate): roughly $2,500–$8,000/yr (Deploi estimate, illustrative) for API version bumps, hold-flow changes and, on the in-house path, list-format changes and threshold retuning. The vendor's annual fee is separate and quote-based.
- What you own — and what you take on
- You own: the integration, the hold logic, the review queue and the decision log. You take on: keeping the compliance owner in the loop on every match, and on the in-house path, the defensibility of your own thresholds.
3-Year Total Cost of Capability
| Buy (app path) | Build (custom path) | |
|---|---|---|
| Year 0 (setup) | $20,000–$50,000 (integration plus first-year fee) | $15,000–$35,000 (matcher plus counsel review) |
| Years 1–3 (recurring) | $30,000–$90,000 (illustrative API fees plus upkeep) | $9,000–$24,000 (maintenance and list retuning) |
| 3-year total | ≈$50,000–$140,000 | ≈$24,000–$59,000 |
- † All figures illustrative samples for the reference scenario — not quotes, not verified pricing.
- † App path: a quote-based screening API subscription as an illustrative mid-band placeholder plus the Shopify integration; Descartes publishes no price.
- † Build path: in-house matcher on free government list downloads with hold, queue and log; counsel review in year 0; three-year horizon.
What the Sticker Price Hides
On the buy path
- — Descartes publishes no price and sells by enterprise contract (verified Sep 2026); expect procurement time before any integration starts
- — The vendor screens; it does not hold your Shopify fulfillment; that integration is a separate build nobody quotes on the sales call
- — Two candidate App Store slugs (descartes, denied-party-screening) both return 404; a listing that looks like screening is a fraud filter
- — Screening only at checkout misses address edits and B2B company onboarding; scope every entry point
On the build path
- — Match thresholds are a legal decision; without counsel sign-off, a home-built matcher is a liability with a dashboard
- — List formats change; a stale download is worse than no screening because it looks like screening
- — ~15–20% of build cost per year in upkeep (Deploi estimate)
- — False positives on common names swamp a review queue; tune on a year of real order data before go-live
What Merchants Say
Compliance leads describe the same uncomfortable discovery: years of international orders shipped with no check against any sanctions list, because the Ecommerce stack never had a step for it and nobody assumed the App Store would be empty.
The Security-category complaint shape: reviewers install a 'compliance' app expecting regulatory coverage and find a cookie banner or a chargeback filter, with nothing behind the word compliance.
If You Change Your Mind Later
If you bought and outgrow it
Screening history exports from the vendor on the terms of your contract, so negotiate the export clause before signing. The order-hold integration, review queue and decision log are yours and survive a vendor swap; only the API call changes.
If you built and want out
Nothing is stranded: the hold flow, queue and log stay, and swapping the in-house matcher for a vendor API is a one-endpoint change. The decision log you kept becomes the baseline a vendor asks for at onboarding.
When This Answer Changes
We're watching for:
- ▸ Any App Store listing performing OFAC, BIS or consolidated-list screening (none across 26 Security and Legal apps as of September 2026)
- ▸ Descartes or a peer trade-compliance vendor publishing a Shopify connector or self-serve pricing
- ▸ Shopify adding sanctions screening to native fraud analysis or Managed Markets (nothing documented as of September 2026)
Verdict change log:
No changes since first publication (September 2026).
Common Questions
Is there a Shopify app for denied-party or sanctions screening?
No. All 26 apps in the Shopify App Store's Security and Legal category are fraud and chargeback filters, GDPR cookie banners, EU withdrawal buttons and accessibility widgets; none matches orders against OFAC, BIS or Treasury lists (verified September 2026). Descartes, the real denied-party screening vendor, has no listing, and its 2 likeliest App Store slugs return 404. Screening reaches Shopify only through an integration you build.
How do you screen Shopify orders against OFAC and BIS lists?
Screening Shopify orders takes 3 steps. An orders/create webhook sends the ship-to and billing party to a screening API or your own matcher. A potential match places the fulfillment order on hold before any label prints. A compliance reviewer releases or cancels, and every decision is logged. Descartes supplies the screening engine on a custom quote; the integration is a $15,000–$40,000 build (Deploi estimate, illustrative).
Can a mid-market merchant build its own restricted-party screening?
Yes, with limits. An in-house matcher against the free government list downloads, with a fulfillment hold and a decision log, runs $15,000–$35,000 (Deploi estimate, illustrative) and suits merchants under roughly 1,000 international orders a month. The match thresholds need compliance counsel's sign-off, and a stale list or a loose threshold is a liability that looks like a control. Above that volume, license the matching from a vendor.
Your Next Steps
If you're going with CUSTOMIZE(matches your selected profile)
- Inventory every entry point: online checkout, draft orders, B2B company onboarding, address edits
- Request a Descartes (or peer) quote and confirm the API supports per-order screening with match scores
- Build the orders/create screening call, the fulfillment hold and the review queue
- Log every decision with list, score, reviewer and reason to an order metafield and your own store
- Backfill: screen the last 12 months of international orders once, and document the result
If you're going with BUILD
- Get counsel to approve match thresholds and the list set before writing code
- Automate a nightly refresh of the government list downloads with a staleness alert
- Ship the matcher, hold and queue; test on a year of historical orders for false-positive rate
- Schedule a quarterly review of thresholds and a written procedure for every match
Official Docs & Sources
- Fraud analysis — Shopify Help Center
- Shopify Flow — Shopify Help Center
Official documentation linked for verification — our verdicts and estimates are our own.
Related Decisions
Build or Buy Accessibility Regression Monitoring on Shopify?
AudioEye's Shopify listing is delisted and UserWay sits at 2.6★ on 10 reviews, so catching a theme-update regression is a pipeline job.
Build or Buy ADA Litigation Exposure Management on Shopify?
Shopify tests Dawn, Checkout and Admin, not your storefront. A widget is not the answer to a demand letter; a code-level audit, remediation and a dated log are.
Build or Buy a Checkout Terms Consent Checkbox on Shopify?
Shopify ships no native terms-of-service consent checkbox at checkout, so this is one of the few decisions here that is a clean, cheap buy.
Build or Buy Counterfeit and Impersonation Monitoring on Shopify?
One Shopify app scans for copycat stores (StoreLock, 9 reviews); Red Points is quote-only. Neither enforces. Build the evidence ledger, intake and seller directory.
Shopify Theme Sections: Buy Premium or Build a Section Library?
A custom theme section library wins at mid-market campaign tempo; below the floor, a premium theme is the right call.
Ready to close the screening gap?
The App Store has nothing for this. We build the screening integration and fulfillment hold around whichever engine your compliance counsel signs off on.
Contact us todayVerdict scored for the reference scenario above. Estimates are not quotes; app pricing carries its verification date and gets re-verified quarterly. Full scoring anchors: see the TCC methodology.
Read how we score these decisions (the TCC Framework). No affiliate links, no paid placement — no app vendor pays to appear here.