Denied Party Screening

Glopal automatically validates all provided buyer delivery addresses against international carrier rules, and checks if the buyer is listed on any relevant official sanction list. Glopal checks below official sources daily for updates: are:

• EU Financial Sanctions Files (FSF)

• UK Consolidated List of Financial Sanctions Targets issued by the Office of Financial Sanctions Implementation (OFSI)

• US Trade Consolidated Screening List (CSL) issued by the International Trade Administration (ITA), consolidating multiple export screening lists of the US Departments of Commerce, State, and Treasury

The screening is carried out during the order processing. Alternatively, Glopal provides a separate API service to allow the integration of denied party screening in a customised process:

Validates (and creates) address against carrier specifications

post

/address/check

Header parameters

x-loginstringrequired

Client username (set by Glopal)

Example: username

Pattern: ^[a-z0-9\-]{3,255}$

x-aliasstring

Optional system username to enable separation of authentication credentials by integrated client system. (set by Glopal)

Example: alias-username

Pattern: ^[a-z0-9\-]{3,50}$

x-signaturestringrequired

The authentication signature is created by using the concatenation of the login, the ‘@’ sign and the timestamp, transformed into a HMAC_256 signature using your secret access key.

Example: 40b976b35a08bb951439ea7bbfa0a7bd73dab7c813399a31d9d1a157bc08929b

Pattern: ^[0-9a-f]{64}$

x-timestampnumber · floatrequired

The authentication timestamp must be a decimal numeric representing the current POSIX time, extended to microsecond accuracy. If the requesting system does not provide high-resolution time, it is advised to use a 6-digit random number. It is important to have the requesting system synchronised with a reliable time source (f.i. a stratum 2 NTP server) to avoid request rejection.

Example: 1680010295.775523

Pattern: ^[12]\d{9}\.\d{6}$

x-versionnumber · float · default: 0.68

Pattern: (^0\.\d{2}$|^[1-9]\d*\.\d{2}$)

Body

application/jsonapplication/xml

addressall ofrequired

wantsobject

Responses

application/jsonapplication/xml

application/jsonapplication/xml

application/jsonapplication/xml

application/jsonapplication/xml

application/jsonapplication/xml

application/jsonapplication/xml

application/jsonapplication/xml

application/jsonapplication/xml

JS

Py

JS

const timestamp = String(Date.now() / 1000).padEnd(17, '0');
const username = "username";
const signature = CryptoJS.HmacSHA256(
  `${username}@${timestamp}`, "sharedsecret"
  ).toString(CryptoJS.digest)

const response = await fetch('https://ws.xport.glopalservice.com/address/check', {
  method: 'POST',
  headers: {
    "Content-Type": "application/json",
    "x-login": username,
    "x-timestamp": timestamp,
    "x-signature": signature
  },
  body: JSON.stringify({
    "address": {
      "name": "Test Testington",
      "user_reference": "testref",
      "address1": "Test street 1",
      "postcode": "90210",
      "state": "CA",
      "city": "Beverly Hills",
      "country": "US"
    }
  }),
});
const data = await response.json();

200

400

401

403

404

405

500

503

200

application/json

application/xml

application/json

Success

Success with address record saved

Error

Success

{"error":0}

OK