Frequently Asked Questions / FAQs
General
What is the purpose of the tool?
The Eversheds Sutherland Sanctions Tool helps users navigate the ever-changing and complex sanctions landscape.
You can view recent updates, global sanction guides, our capabilities and contact details of our Sanctions team.
The tool also offers an additional subscription service, which provides access to a detailed breakdown of recent updates across the UK, EU and US sanction regimes, along with a repository containing both current and historic sanctions related documents.
How do I access the app?
Subscription
What is included in the paid service?
Within the paid service you gain access to our tracker and repository. The tracker provides you with line by line details of recent updates across the UK, EU and US sanction regimes. The tracker gives you the ability to also add your own notes to each record indicating who is responsible within your company, what steps are to be taken and any key dates which need to be logged. The repository is a documents store for documents relating to both the tracker and also as a stand-alone feature.
Within the paid service you gain access to our tracker and repository. The tracker provides you with line by line details of recent updates across the UK, EU and US sanction regimes. The tracker gives you the ability to also add your own notes to each record indicating who is responsible within your company, what steps are to be taken and any key dates which need to be logged.
The repository is a documents store for documents relating to both the tracker and also as a stand-alone feature.
I have requested access to the paid service, what is next?
Once you have completed a registration form for the subscription service, this will be submitted to our team. The form will then be reviewed and a member of our team will be in touch to discuss the costs of the tool and to gather user access details.
Once we have carried out all of our preliminary checks you will be granted access to the subscription service for a one month trial period. During this period you will be contacted to complete a Record of Instruction (an “ROI”) in order to fully onboard you onto the tool.
Data and Security
How often can my organisation extract the data relating to them?
If your organisation requires an extract of the data which is held in the tracker, please speak to your Eversheds Sutherland contact to discuss this. You will also be provided with an annual extract of the data around the time you are nearing your annual subscription renewal date.
Information relating to data security
Our service is built using Microsoft technology and hosted within Microsoft’s secure cloud environment. Microsoft operates in line with internationally recognised security standards, including ISO/IEC 27001 for Information Security Management Systems, alongside a comprehensive set of compliance certifications. Microsoft continuously enhances its services through regular updates, proactive monitoring, and independent third-party audits to ensure alignment with evolving regulatory and security requirements.
All connections to the service are secured using industry-standard encryption protocols, and data at rest is encrypted within Microsoft-managed data centres. Microsoft’s cloud infrastructure is designed for resilience and high availability, distributing services across multiple geographically separate locations to support business continuity and disaster recovery. The solution has also undergone appropriate security testing prior to release. Please contact us if you require further information about data and information security.
What security measures are in place from the supplier (Microsoft)?
Microsoft implements robust technical and organisational security measures to safeguard Personal Data against accidental loss, unauthorised access, use, alteration, or disclosure. Access to Personal Data is restricted to authorised personnel and trusted parties who have a legitimate business need, and who are bound by strict confidentiality obligations. Personal Data is processed in accordance with documented instructions and applicable data protection laws.
Microsoft also maintains comprehensive incident management processes to detect, respond to, and mitigate potential data breaches. Where required by law, appropriate notifications will be made to affected parties and relevant regulators.