Can the form be signed electronically?

Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted. Ensure the platform captures intent, consent, attribution, and retention to meet the esign legal-validity test.

Is a notary required for approval?

Not typically for internal assessments. If your policy or state law requires notarization for executive approvals, follow state-specific notary rules; remote online notarization (RON) may be acceptable where state law permits.

How long should we retain completed assessments?

Retain during the contract life plus regulatory windows; typical practice is 3–7 years depending on tax, audit, or industry requirements and HIPAA rules where PHI is involved.

Who must approve a high-risk decision?

Policies vary; common practice is escalation to senior compliance, general counsel, or a delegated board designee for high or critical risk outcomes.

What if a counterparty is on a sanctions list?

If sanctions or prohibited party hits are confirmed, cease onboarding and consult legal immediately. Document the finding in the assessment and preserve screening evidence for potential regulator review.

How do we correct an error after submission?

Create a documented amendment or addendum that cites the original assessment, summarizes the correction, includes supporting evidence, and is signed by the original approver or an authorized delegate.

Electronic Signature
Templates
Miscellaneous
High Risk Country Assessment Form

High Risk Country Assessment Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

High Risk Country Assessment Form

Recitals

WHEREAS, Client Name: (the "Client") seeks to evaluate risks associated with operations, transactions or engagements involving a specified country (the "Assessment"); and

WHEREAS, Assessor Name: (the "Assessor") has been retained to perform the Assessment and to recommend mitigation measures consistent with applicable compliance programs, laws, and contractual obligations.

WHEREAS, the parties intend that the Assessment and any resulting recommendations be memorialized in this instrument and form part of the parties' compliance documentation.

Assessment Identification

Country Under Assessment Assessment Reference Number

Scope of Work

The Assessor shall conduct a risk-based evaluation limited to the matters identified below, produce a written assessment of risk levels, and recommend reasonable mitigation and monitoring steps. The Scope of Work describes the specific activities, deliverables, and timelines.

Scope of Work (describe activities and deliverables)

Risk Factors & Indicators

The Assessor shall evaluate the presence and severity of the following indicators. Check all that apply and provide detail where marked.

Risk Indicators

Sanctions or trade restrictions affecting the country Terrorism or violent conflict High levels of public-sector corruption or bribery Export controls affecting critical goods or technology Banking, foreign exchange, or correspondent banking limitations Travel or operational advisory currently in effect Political instability or abrupt regulatory change Reliance on third-party intermediaries or agents Material human rights concerns Other (specify below)

If Other, describe

Risk Scoring

Assign a likelihood and impact score (1-5) and provide a composite risk rating with rationale.

Likelihood (1 = Rare, 5 = Highly Likely) Impact (1 = Low, 5 = Severe) Composite Risk Rating and Rationale Final Classification (select one)

High Risk Elevated Risk Not High Risk

Mitigation Measures and Recommendations

Recommended Mitigation Steps Required Ongoing Controls (monitoring, audits, contractual protections)

Payment Terms

The following payment terms apply to any fee arrangement between the Client and the Assessor in connection with this Assessment.

Total Fee Amount Payment Schedule Late Payment Fee

Term and Termination

The term of this engagement commences on the Start Date below and expires on the End Date unless earlier terminated in accordance with this section.

Start Date End Date Notice Period for Termination

Either party may terminate for material breach that remains uncured after the notice period specified above. Termination shall not relieve the Client of payment obligations for services performed and deliverables produced prior to termination.

Confidentiality

Each party agrees that Confidential Information disclosed by the other party in connection with this Assessment shall be held in strict confidence and used solely for the purposes of performing the Assessment. "Confidential Information" includes non-public business information, assessment findings, risk ratings, and any personal or financial data exchanged. Confidential Information does not include information that: (a) is or becomes publicly known through no breach of this Agreement; (b) is rightfully received from a third party without restriction; or (c) is independently developed without use of the disclosing party's Confidential Information.

The obligations in this section survive termination of this engagement for a period of five (5) years, except that trade secrets shall remain protected for as long as they qualify as trade secrets under applicable law.

Assessor Certification

The undersigned Assessor certifies, to the best of their knowledge after reasonable inquiry, that the facts set forth in this Assessment are true, accurate and complete, and that all material risks known to the Assessor that would bear on the Client's decision-making have been disclosed in writing in this form.

Assessor Comments and Certification Detail

Governing Law

This Assessment and any related agreement shall be governed by and construed in accordance with the laws of the jurisdiction specified below, without regard to conflict of laws principles.

Governing Jurisdiction

Entire Agreement

This document constitutes the entire agreement between the Client and the Assessor with respect to the subject matter hereof and supersedes all prior proposals, understandings and communications, whether written or oral. Any amendment to this Assessment must be in writing and signed by authorized representatives of both parties.

Recordkeeping and Retention

The Assessor shall retain all workpapers, supporting documentation and notes related to this Assessment for a minimum of seven (7) years and shall make such materials available to the Client upon reasonable request, subject to confidentiality protections.

Contact Information

Client Contact Name Client Contact Title Client Contact Email / Phone Assessor Organization

Client Representative:

By:

Date:

Assessor Representative:

By:

Date:

What the High Risk Country Assessment Form Is

The High Risk Country Assessment Form documents an organization’s review of a foreign country, jurisdiction, or counterparty activity that may present elevated legal, regulatory, financial, or reputational risk. It records factual country indicators, risk scoring, mitigation measures, reviewer findings, and an approval decision so that downstream teams (compliance, legal, procurement, finance) have a consistent record to rely on for onboarding, contracting, or transaction approval.

Why a Formal Assessment Matters for Compliance

A documented assessment provides objective evidence of due diligence, supports regulatory compliance where cross-border risk must be demonstrated, and creates an auditable trail for internal and external reviewers. Under U.S. law, organizations should retain records demonstrating risk-based decisions, and well-structured assessments reduce ambiguity when regulators or auditors review international activity.

Teams That Commonly Complete This Form

Multiple functions typically collaborate to complete the assessment; responsibilities are assigned to ensure accuracy and accountability.

Compliance and Regulatory — perform sanctions, AML, and export-control checks and document findings for audit.
Legal and Contracts — evaluate contractual protections, governing law, and enforceability in the listed jurisdiction.
Procurement and Vendor Management — assess vendor stability, supply-chain exposure, and required contractual clauses.

Final sign-off often requires an authorized approver (head of compliance, general counsel, or delegated signatory) to accept residual risk and authorize the relationship or transaction.

Essential Sections to Include in the Assessment

A professional High Risk Country Assessment Form groups information into discrete, standardized sections so reviewers can compare risks across requests and build a consistent audit trail.

Country Profile

Country name, ISO code, economic and political summary, key risk indicators (sanctions, terrorism financing lists, export-control restrictions).

Risk Criteria

Defined scoring with criteria (sanctions presence, financial opacity, regulatory instability, corruption indexes) and numeric weights for each factor.

Counterparty Details

Entity name, registration jurisdiction, beneficial ownership, trade history, and any known affiliations with sanctioned persons or entities.

Mitigation Controls

Planned controls such as enhanced due diligence, payment restrictions, escrow, transaction caps, or required contractual warranties.

Reviewer Findings

Narrative analysis supporting the score, references to source documents, and links to sanctions/PEP/KYC search results.

Decision & Approvals

Clear accept/decline/conditional outcome with approver name, role, signature block, and effective date.

Required Data Elements and Security Controls

Entity Name: Registered legal name

Country of Operation: Jurisdiction name and ISO code

Beneficial Owner: Ultimate beneficial owner details

Sanctions Check: Search results summary

Reviewer Identity: Name, role, contact

Document Security: Access controls and encryption

Step-by-Step: Completing the Form

Follow this sequence to gather evidence, assign a score, and obtain approvals so the assessment is complete and defensible.

01

Gather Source Data: Collect sanctions lists, government advisories, and counterparty corporate records.
02

Run Screening: Perform sanctions, PEP, and adverse media checks and attach results.
03

Score Against Criteria: Apply the rubric and compute the overall risk score.
04

Approve or Escalate: Document decision, mitigation steps, and obtain authorized sign-off.

How to Configure an Online Assessment Workflow

Set up a digital workflow that enforces required fields, routes approvals, and captures an audit trail for each assessment instance.

Field	Configuration
Mandatory Fields	Make country, counterparty, score, and approver required
Conditional Routing	Route high-score results to senior compliance automatically
Document Attachments	Require screening reports and corporate records before submission
Audit Trail	Enable timestamped logs, signer attribution, and version history

Where to Send and How to Store Completed Forms

Define a single authoritative repository and distribution path so stakeholders can retrieve the assessment and related evidence.

Primary Repository: Store signed assessments in the compliance document system with role-based access
Email Distribution: Send copies to procurement, legal, and finance after approval
Case File Linking: Link the assessment to vendor and contract records for future audits
Retention Tagging: Tag documents with retention schedule and disposition rules

Digital Signing, Integrations, and Technical Needs

Choose a signing platform and integrations that meet authentication, retention, and audit requirements for cross-border risk decisions.

Authentication Options: Email, SMS OTP, or stronger KBA and SSO where required
Integrations: Connectors to GRC, ERP, and document storage (Salesforce, NetSuite, Box)
Compliance Features: Audit trail, encryption at rest and in transit, and BAA where needed

Ensure the platform preserves PDF audit artifacts and role-based logs so the assessment is admissible and reproducible under ESIGN (15 U.S.C. ch. 96) and UETA standards.

Common Mistakes to Avoid

Incomplete source documentation — missing sanctions or corporate registration evidence.
Using inconsistent country names or codes that break automated lookups.
Failing to attach screening reports and leaving reviewer conclusions unsupported.
Not obtaining a clear, attributable approver signature tied to a role.

Consequences of Inaccurate or Missing Assessments

Regulatory Exposure: Fines or enforcement for inadequate sanctions or AML controls

Contractual Risk: Invalid or unenforceable contracts in certain jurisdictions

Financial Loss: Blocked payments, frozen assets, or chargebacks

Reputational Harm: Negative media and partner distrust

Operational Delay: Onboarding holds and remediations

Audit Findings: Corrective action plans and increased oversight

Practical Tips for Accurate and Efficient Completion

Adopt standardized data inputs and automation where possible to reduce rework and support consistent decisions.

Use a Scoring Rubric

Define objective weights and thresholds for low/medium/high risk to reduce subjective variation among reviewers.

Automate Screening

Integrate sanctions and PEP screening so results populate the form automatically and attach evidence.

Document Rationale

Require a short narrative explaining why mitigations were chosen; this strengthens defenses in audits.

Reassess Periodically

Schedule re-assessments (e.g., annually) for accepted relationships or sooner if country conditions change.

Real-World Use Cases

Sample scenarios show how assessments support different business decisions and document outcomes for audit trails.

Global Vendor Onboarding

A procurement team needs to approve a new supplier in a sanctioned-adjacent jurisdiction.

They run sanctions and corporate registry checks to identify UBOs.
The assessment captured evidence, added payment controls, and required senior compliance approval before any purchase orders were issued, creating a defensible audit trail.

Cross-Border Contract Renewal

Legal must decide whether to renew a multi-year service contract with operations in a politically unstable country.

The team scores country risk as high and requests escrow plus quarterly monitoring.
The documented mitigation enabled a conditional renewal with contract clauses protecting the company from future sanctions-driven disruptions.

Typical Timelines and Expected Turnaround

Set clear deadlines for screening, review, and approval to avoid business delays and ensure timely compliance.

Initial Screening:

Complete within 24–72 hours for standard cases

Enhanced Due Diligence:

Allow 5–14 business days for complex ownership or adverse media checks

Reviewer Response:

Compliance reviewer to respond within 3 business days

Approver Sign-off:

Decision recorded within 2 business days of final reviewer comments

Reassessment Schedule:

Periodic reassessment at least annually or when country risk changes

eSignature Vendor Pricing and Feature Comparison

Compare basic pricing and common capability flags for electronic signature providers that can support secure, auditable signing of assessment forms. signNow is listed first per comparative structure.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial (no credit card)	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes (Business Premium adds bulk send)	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes (BAA available)	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies by plan	Varies by plan	Varies by plan

Frequently Asked Questions

Answers to common questions about completing, signing, and storing High Risk Country Assessment Forms.

Need help? Contact support

Can the form be signed electronically?
Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted. Ensure the platform captures intent, consent, attribution, and retention to meet the esign legal-validity test.
Is a notary required for approval?
Not typically for internal assessments. If your policy or state law requires notarization for executive approvals, follow state-specific notary rules; remote online notarization (RON) may be acceptable where state law permits.
How long should we retain completed assessments?
Retain during the contract life plus regulatory windows; typical practice is 3–7 years depending on tax, audit, or industry requirements and HIPAA rules where PHI is involved.
Who must approve a high-risk decision?
Policies vary; common practice is escalation to senior compliance, general counsel, or a delegated board designee for high or critical risk outcomes.
What if a counterparty is on a sanctions list?
If sanctions or prohibited party hits are confirmed, cease onboarding and consult legal immediately. Document the finding in the assessment and preserve screening evidence for potential regulator review.
How do we correct an error after submission?
Create a documented amendment or addendum that cites the original assessment, summarizes the correction, includes supporting evidence, and is signed by the original approver or an authorized delegate.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now