KYC and contractor due diligence: beneficial owners, sanctions, references
Contractor due diligence is the set of checks a contracting authority, financier, or prime contractor runs on a bidder before signing a public contract: confirming legal identity, mapping beneficial owners, screening against sanctions lists, and verifying references from past projects. For companies that bid on tenders, understanding this process in advance — rather than reacting to a request letter mid-evaluation — is what keeps a technically strong bid from stalling at the compliance stage.
This explainer walks through the core components of contractor due diligence: KYC document collection, beneficial ownership disclosure, sanctions screening, and reference verification, plus how these pieces typically fit into a procurement file. It draws on publicly available guidance from bodies such as the OECD and the World Bank, and it does not replace legal, tax, or compliance advice specific to your jurisdiction.
What Counts as Contractor Due Diligence in a Tender Process
In most public procurement systems, contractor due diligence happens in two stages. First, at the qualification stage, the contracting authority checks that the bidder meets eligibility criteria set out in the notice — legal standing, financial capacity, relevant experience. Second, at the pre-award or contract-signing stage, a deeper review may apply, particularly for donor-funded projects, high-value contracts, or sectors subject to additional anti-money-laundering rules (construction, extractives, defense-adjacent supply).
The due diligence file commonly includes:
- Corporate registration documents confirming the bidder is a validly existing legal entity.
- A beneficial ownership declaration identifying the natural persons who ultimately control the company.
- Sanctions and politically exposed persons (PEP) screening results for the entity and its owners.
- Financial statements or bank references demonstrating capacity to deliver the contract.
- Reference letters or completion certificates from comparable past contracts.
If you are still mapping which notices and lots your company is eligible for, it helps to start from how to find public tenders worldwide and how to read a tender notice before assembling the due diligence file — eligibility criteria and KYC requirements are usually stated in the same documents.
Why KYC Checks Happen Before Contract Signature
KYC — Know Your Customer — is a term borrowed from banking and anti-money-laundering regulation, and it has become standard practice in public procurement, especially for contracts funded or co-funded by multilateral development banks. The logic is straightforward: a contracting authority or financing institution needs reasonable assurance that public or donor funds are not flowing to sanctioned individuals, shell companies, or entities with undisclosed conflicts of interest.
KYC in a tender context usually asks you to confirm:
- The exact legal name, registration number, and jurisdiction of the bidding entity.
- The identity of directors and legal representatives authorized to sign the contract.
- The identity of beneficial owners above the applicable ownership or control threshold.
- Whether any director, owner, or the entity itself appears on a sanctions or exclusion list.
- Whether the bidder has been debarred or suspended by another contracting authority or development bank.
The World Bank's procurement and debarment framework is a useful public reference point for how debarment lists function internationally, even for contracts outside Bank financing, because many national systems mirror similar integrity principles.
Beneficial Ownership: Who Actually Controls the Bidder
A beneficial owner is the natural person who ultimately owns or controls a company, as distinct from the legal owner on paper. Most anti-money-laundering frameworks set a disclosure threshold — commonly around 25% of shares or voting rights — above which an individual must be named, but thresholds and definitions differ by country, so you should confirm the exact rule in the jurisdiction of both the contracting authority and your own company's registration.
Contracting authorities ask for beneficial ownership disclosure for a simple reason: it prevents a single sanctioned or conflicted individual from bidding repeatedly through different shell entities. For consortiums, joint ventures, and subcontracting chains, this means every member entity in the structure may need to disclose its own beneficial owners, not just the lead bidder.
Practical tip: keep a current beneficial ownership register on file year-round rather than reconstructing it under deadline pressure for each tender. Many jurisdictions already require this register for tax or company-registry purposes, so the data often already exists — it just needs to be formatted to match the specific procurement's KYC template.
Sanctions Screening: Lists, Scope, and Common Pitfalls
Sanctions screening checks the bidding entity, its directors, and its beneficial owners against restricted-party lists maintained by bodies such as the United Nations Security Council, the European Union, the U.S. Office of Foreign Assets Control (OFAC), and relevant national authorities. For contracts financed by multilateral institutions, screening may also cover each institution's own debarment or ineligibility list.
| Screening layer | Typical source | What it checks |
|---|---|---|
| UN sanctions lists | UN Security Council Consolidated List | Entities and individuals under global sanctions |
| Regional/national lists | EU, OFAC, UK OFSI, national equivalents | Jurisdiction-specific restricted parties |
| Development bank lists | World Bank, regional development banks | Debarred or suspended firms and individuals |
| PEP screening | Commercial or public PEP databases | Politically exposed persons among owners/directors |
| Adverse media checks | News and public registry searches | Reputational or integrity red flags |
A common pitfall is screening only the entity name and missing variant spellings, former trade names, or recently changed beneficial owners. Another is treating sanctions screening as a one-time event rather than refreshing it before contract signature, since lists are updated frequently and a clean result at bid submission can change before award.
Reference Verification and Past Performance Checks
References are the part of contractor due diligence that speaks to delivery capability rather than legal standing. Evaluators typically request:
- Signed completion certificates or client satisfaction letters for contracts of similar scope, value, or technical complexity.
- Contact details for a named reference who can confirm performance directly.
- Evidence of any contract terminations, penalties, or disputes, since omissions discovered later can undermine credibility more than disclosing them upfront.
Reference checks are also where documentation discipline pays off. If your project files, certificates, and client correspondence are organized consistently across contracts, assembling a reference package for a new tender becomes a matter of retrieval rather than reconstruction — a theme covered in more depth in how to prepare tender documentation.
Risks and Limits of Contractor Due Diligence
Contractor due diligence reduces integrity and compliance risk, but it has clear limits that bidders should understand before relying on it as a strategy:
- Passing KYC and sanctions screening confirms eligibility; it does not score technical merit, price, or methodology, which usually carry the most weight in evaluation.
- Beneficial ownership rules and disclosure thresholds vary by jurisdiction, so a structure acceptable in one country's registry may require additional disclosure elsewhere.
- Sanctions lists change frequently; a result that was clean at the qualification stage can shift before contract signature, which is why many authorities re-screen before award.
- Reference checks depend on the accuracy and availability of named contacts — an unreachable reference can delay or weaken an otherwise strong submission.
- No due diligence process, however thorough, can substitute for compliance with the specific evaluation criteria published in the tender notice, and no provider can guarantee contract award or financing approval as an outcome of completing it.
Treat due diligence as a gating requirement to clear cleanly and early, not as a competitive differentiator on its own.
A Practical Contractor Due Diligence Checklist
- Confirm the legal entity's registration status, registered address, and authorized signatories are current in the national company registry.
- Prepare or update a beneficial ownership declaration listing all individuals above the applicable disclosure threshold.
- Run an internal sanctions and PEP screening on the entity, directors, and beneficial owners before submitting the bid.
- Collect recent financial statements, tax clearance certificates, and bank reference letters in the format the tender documents request.
- Assemble reference letters or completion certificates for at least the number of comparable contracts the notice requires.
- Cross-check beneficial ownership and signatory details against any joint venture or subcontracting partners in the bid.
- Refresh sanctions screening results close to the submission deadline, since lists are updated regularly.
- Store the full due diligence file alongside your bid compliance checklist so KYC evidence and technical compliance evidence are reviewed together.
For contracts that also require a bid bond or performance guarantee, due diligence on the guarantor bank is equally relevant — see bid bonds and tender guarantees explained for how that process typically works alongside KYC.
Frequently Asked Practical Points
Public procurement rules continue to evolve, particularly around beneficial ownership transparency; the OECD's public procurement work and the UNCITRAL Model Law on Public Procurement are useful reference points for how different legal systems approach these requirements, alongside TED for EU-specific notices and ISO standards referenced in technical and quality criteria.
Building a repeatable contractor due diligence process — rather than assembling documents from scratch for every tender — is one of the more reliable ways to shorten your internal preparation time and avoid late-stage compliance rejections.
Leave your contacts for a consultation on tender selection and documentation preparation.
This material is for informational and educational purposes only. It is not legal, tax, or financial advice and it is not an official statement of any contracting authority. B2G Global Services Corp. is not a government agency. Outcomes in public procurement depend on published criteria, local law, and the bidder's own evidence. Readers should verify primary sources as of the action date.