A Swiss trading house and its EU-based banking partner are reviewing the same commercial counterparty. Both conduct what they call "due diligence." Both clear the file. Yet one may have satisfied its regulator; the other may not. Same counterparty, same documents, different legal obligations – and a potential compliance failure neither spotted.
Counterparty due diligence under the EU sanctions regime and Switzerland's SECO regime share a common purpose – identifying prohibited dealings before they occur – but they diverge in legal architecture, ownership-and-control tests, documentation expectations, and enforcement posture. As of mid-2026, both regimes are active and fully enforced, but a business relying on a single standard across both jurisdictions risks satisfying neither.
This analysis maps the key divergences, identifies the pressure points that most frequently produce compliance failures in cross-border transactions, and explains when to seek specialist counsel before signing.
What governs counterparty due diligence under the EU regime?
EU counterparty due diligence obligations flow directly from the relevant Council Regulations adopted under the EU's Common Foreign and Security Policy, supplemented by Council Decisions and, where applicable, sector-specific provisions. The underlying legal authority is the Council acting under Treaty powers; enforcement sits with the competent national authorities of each Member State. There is no single EU-wide enforcement body for financial sanctions – the obligation to act falls on the operator, and it is tested by national authorities whose standards and enforcement appetite vary.
The EU General Court and the Court of Justice provide the ultimate judicial check on designation validity, but they do not review individual firms' due-diligence practices. That review sits with national regulators. In our cross-border practice, the practical consequence is that a business operating across five Member States faces five enforcement relationships, each with different procedural traditions and escalation timelines, even though the underlying regulation is identical.
Counterparty due diligence under the EU rules is not explicitly codified in the way a licensing procedure might be. The obligation is implied by the prohibitions themselves: if a transaction with a designated person or a person owned or controlled by a designated person is prohibited, then the burden of determining that status falls on the party proposing to transact. The EU's ownership-and-control guidance clarifies this. It does not prescribe a documentation checklist; it sets a standard of care.
How does SECO's legal basis compare?
Switzerland's counterparty due diligence obligations arise under SECO's sanctions ordinances – the instruments adopted by the Swiss Federal Council to implement autonomous Swiss measures and, selectively, measures aligned with UN Security Council resolutions. SECO administers the regime; enforcement is handled by SECO itself with referral to criminal prosecutors where necessary. The Swiss legal architecture is more centralised than the EU's: one authority, one set of ordinances, one enforcement point of contact.
That centralisation matters for due diligence in practice. Under the SECO regime, businesses dealing with Swiss-nexus transactions can consult SECO directly and, where uncertainty exists, seek an administrative ruling. The EU offers no equivalent single-window function. In our experience, this makes informal pre-clearance a realistic option in Switzerland – and an unrealistic one across the EU, where no single authority speaks for the bloc on a firm's specific transaction.
SECO's sanctions lists are publicly available and are the primary screening reference for Swiss-nexus transactions. Switzerland does not automatically transpose EU autonomous measures; Swiss lists and EU lists can diverge. A counterparty cleared against the EU consolidated list may still appear on a Swiss ordinance list – and vice versa. Businesses running a single-list screening protocol in a bilateral EU-Switzerland transaction are running a structural gap.
Where do the ownership-and-control tests diverge?
The EU applies an ownership-and-control test: an entity that is owned or controlled by a designated person is itself subject to the same prohibitions, even if that entity does not appear on a list. The EU guidance describes a two-limb analysis – ownership above a defined threshold, or actual control by a designated person through other means such as board composition, veto rights, or financial dependency.
Switzerland's ordinances address ownership and control in a manner broadly consistent with the EU approach, but the application guidance differs. SECO's published materials place somewhat greater emphasis on the listed person's direct economic interest in the counterparty than on diffuse control indicators. In our experience, the practical gap shows up in cases involving minority stakes combined with contractual control: the EU analysis is more likely to treat strong contractual control rights held by a designated person as triggering the prohibition, even where the equity stake is below the primary ownership threshold.
This divergence has real consequences for M&A and trade-finance due diligence. A target company in which a designated person holds a minority stake but retains material governance rights may be caught under the EU analysis and not caught under the SECO analysis, or the positions may be reversed depending on how each regime's guidance is applied. Neither outcome is guaranteed; both must be tested.
One principle applies across both regimes without exception: where a genuine ambiguity exists about whether a counterparty is caught, the prudent position is to treat it as potentially prohibited until the analysis is resolved. A compliance failure traced to an undisclosed ownership chain is not mitigated by the fact that a different regime's test would have produced a different answer.
What does adequate documentation look like under each regime?
Neither the EU regime nor SECO prescribes a mandatory documentation checklist for counterparty due diligence. Both regimes assess adequacy by reference to the circumstances: the sector, the transaction value, the counterparty's jurisdictional risk profile, and whether red flags were present and addressed. The absence of a checklist is not an absence of a standard. It is a risk-proportionate standard whose content shifts with the facts.
Under the EU approach, national enforcement decisions and supervisory guidance across multiple Member States have shaped a de facto expectation for commercial transactions of material size. That expectation typically includes: verification of the counterparty's legal name, registered jurisdiction, and ultimate beneficial owner; a structured screen against the EU Consolidated List and relevant UN lists; and a documented rationale explaining why the result satisfies the applicable standard. Where a counterparty operates in a higher-risk jurisdiction or sector, enhanced documentation is expected – not by explicit rule, but because the standard of care is higher.
SECO's enforcement guidance is less granular in public form. The Swiss regime has historically placed significant weight on the willingness of a business to engage proactively – requesting information from SECO, obtaining legal advice, and documenting the decision process. In our experience, Swiss authorities have treated an undocumented clearance decision as a more serious failing than a documented decision that reached the wrong conclusion in good faith. The documentary record is the primary evidence of intent and care.
What does this mean in practice? For a business transacting across both regimes, the safe answer is to build documentation to the higher standard. That means: a named beneficial-ownership analysis to at least the third tier; a dual-list screen against both the EU Consolidated List and the relevant SECO ordinance list; a written explanation of any red flag identified and addressed; and a record of who authorised the final clearance and when. This standard satisfies both regimes' expectations and creates a defensible record in any subsequent review.
How do red-flag identification and escalation obligations differ?
Both regimes impose an implicit obligation to act on red flags: a business that screens a counterparty, identifies a warning signal, and proceeds without further enquiry is exposed whether or not the counterparty is ultimately listed. The specific conduct that triggers this obligation is broader than the formal list-screening process.
Under the EU regime, national-authority guidance in the major financial centres has developed a non-exhaustive list of red flags relevant to counterparty due diligence. These include: beneficial-ownership opacity, the use of nominees in jurisdictions that routinely apply to transactions under specific sanctions regimes, unexplained third-party payment structures, and counterparty reluctance to provide ownership documentation. The EU approach is influenced by the interaction between financial-sanctions obligations and anti-money-laundering requirements, which share an overlapping customer-due-diligence logic.
SECO's red-flag guidance, while publicly available, is less detailed. Switzerland's regulatory tradition places a higher premium on the individual firm's judgement and its relationship with its regulator. A Swiss-domiciled business is generally expected to exercise its own risk judgement rather than to apply a prescriptive checklist. That tradition cuts both ways: it affords greater flexibility but also creates greater exposure if the in-house judgement is later shown to have been inadequate.
Escalation expectations also differ. The EU regime does not prescribe an automatic escalation trigger, but enforcement decisions in several Member States have indicated that a material red flag – one that would have led a reasonably experienced compliance professional to pause the transaction – should generate a written escalation record. The SECO regime, with its more centralised structure, allows for and in some cases expects direct engagement with the authority. For a cross-border transaction, the practical answer is to build a dual-escalation protocol: internal documentation meeting EU expectations, and SECO consultation where the Swiss nexus is material and the facts are genuinely uncertain.
The position above covers the standard case. Your facts – the counterparty, the ownership chain, the goods or services, the route, and the regimes in play – change the analysis. For a first-stage assessment of where your screening protocol sits against both regimes, contact Calder & Vance at info@caldervance.com.
What are the most common compliance failures in cross-border EU–Switzerland transactions?
In our cross-border practice, three failure modes appear with regularity in EU–Switzerland counterparty due diligence matters. Each is avoidable with a properly structured protocol.
The first is single-list screening. A business screens against the EU Consolidated List, assumes the Swiss position is equivalent, and does not run the SECO ordinance list separately. The lists are not identical. Swiss autonomous measures can designate parties not designated under the EU, and EU autonomous measures are not automatically replicated in Swiss ordinances. A single-screen protocol applied to a bilateral transaction is a gap, not a solution.
The second failure mode is incomplete ownership mapping. Both regimes require an assessment of who ultimately owns and controls the counterparty. Screening the legal entity named in the contract without mapping the beneficial-ownership chain is the most frequently exploited gap in a due-diligence programme. In a recent matter, a financial-services business cleared a trading counterparty against both the EU and SECO lists, but had not mapped the counterparty's parent structure beyond the first tier. The exposure was identified only when a restructuring in the parent group brought a listed individual's stake above the relevant threshold – retrospectively, the prior clearances became questionable. The matter was resolved through a structured internal review and voluntary disclosure to the relevant authority, but the process consumed significant management time and created material uncertainty about the firm's historical position.
The third failure mode is static due diligence. A counterparty is cleared at the point of onboarding and not rescreened when lists are updated or when the counterparty's ownership structure changes. Both the EU and SECO regimes impose a continuing obligation. Sanctions lists change, sometimes with short notice. Relying on a twelve-month-old clearance for an active counterparty relationship is not a defensible position under either regime.
Which regime is stricter – and does the question matter?
The question of which regime is stricter is less useful than it appears. For a business with a nexus to both the EU and Switzerland, the answer is: the stricter prohibition governs at the transaction level. Where the EU catches a counterparty and SECO does not, the EU prohibition applies to the EU-nexus leg of the transaction and cannot be solved by routing it through a Swiss entity. Where SECO is the more restrictive instrument for a specific counterparty, the Swiss-nexus leg is prohibited regardless of what the EU position says.
The practical implication is a "strictest-rule" analysis: map the transaction, identify every regime with a nexus to it, apply each regime's test to the counterparty, and proceed only where all applicable tests are satisfied. This is not a conservative interpretation; it is the legally correct one. A business that knowingly routes a transaction through a less restrictive regime to avoid the consequence of a more restrictive one is not exercising legitimate due diligence – it is creating exposure of a different and more serious kind.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. The Calder & Vance team advises on dual-regime compliance across the EU and SECO regimes and can assess the exposure and the available routes. Write to info@caldervance.com.
Practical steps for a cross-border due-diligence programme
A cross-border counterparty due-diligence programme that satisfies both the EU regime and SECO should be built around five operational elements.
- Dual-list screening – run the EU Consolidated List and the relevant SECO ordinance list separately, using a screening tool calibrated to the name-matching standards each regime expects. Do not assume equivalence.
- Beneficial-ownership mapping to at least three tiers – identify every individual who owns or controls the counterparty above the applicable threshold at each tier. Document the source of each ownership assertion and the date of verification.
- Control analysis where ownership is inconclusive – where a listed person holds a sub-threshold stake but retains material governance or economic rights, apply the EU and SECO control tests in turn. Err toward treating the entity as potentially caught until the analysis is resolved.
- Red-flag documentation and escalation – record every warning signal identified during the review, the additional steps taken in response, and the authorised clearance decision. This record is the primary evidence of care in any subsequent enforcement review.
- Periodic rescreening – rscreen active counterparties when the sanctions lists change, when the counterparty's ownership or corporate structure changes, and at least at a defined periodic interval. Static clearances do not remain valid indefinitely.
Situation A – the counterparty is a well-established entity in a low-risk sector with a transparent ownership structure: the due-diligence cycle is lighter, but dual-list screening and a first-tier ownership check remain mandatory. Risk level is lower; documentation requirements are proportionate.
Situation B – the counterparty operates in a higher-risk sector, is registered in a jurisdiction with limited corporate-transparency rules, or has an opaque intermediate structure: enhanced due diligence is required. Ownership mapping should extend beyond the standard three tiers, and SECO consultation should be considered where the transaction has a material Swiss nexus and genuine uncertainty remains after the internal analysis.
A commonly held belief is that Switzerland's neutrality position means its sanctions regime is less demanding than the EU's. This is a myth with practical consequences. Switzerland's autonomous measures cover a broad range of designations; SECO actively enforces its ordinances; and the SECO regime is, in some respects, more responsive to voluntary engagement than several EU Member States' national authorities. The question for a cross-border business is not which regime to rely on – it is how to satisfy both.
Related practices
- Compliance audit and testing – independent review of your screening programme against applicable regime standards
- Counterparty due diligence – OFAC analysis – US-regime ownership and control tests and how they interact with EU and SECO positions
- Counterparty due diligence – OFAC vs OFSI analysis – divergences between US and UK tests, relevant where a transaction spans those regimes