Much more info now
And I had to dig it up myself: OFAC.
So it is entirely on our side that all checking is done. And we already have the customer's permission to have whatever data they have given us. I feared that we would send the info off to a govt. agency.
It is a lot less insidious than I feared. But it is the company's fault that everything is handled so secretively. Everyone is afraid of getting in trouble, so managers do not pass on critical pieces of info (I had to pry to find the acronym OFAC. Then I had to research it externally.). Secrecy sometimes makes things look worse, not better.
