Screen every order before it ships. Keep the proof that you did.
MatchAudit for Shopify screens the names and countries on each order against the sanctions lists you choose, holds fulfillment when something needs a look, and routes it to a person in Shopify Admin. Every screening and decision is kept as an evidence record you can export.
apps.shopify.com/matchaudit_store — installed, billed and cancelled through your Shopify admin.
HOW IT WORKS
Four steps, inside Shopify Admin.
01
Install
Add MatchAudit from the Shopify App Store and approve its permissions. Nothing to code and no spreadsheet to upload.
02
Configure
In Settings, choose the sanctions lists that apply to you, a match threshold, your own country rules and whether every new order is held until it is screened.
03
Orders screened automatically
Each new order and customer is screened as it arrives: billing, shipping, customer and company names against your lists, and the shipping country for country risk.
04
Review matches
A possible match opens a case and holds fulfillment. Your staff read the evidence in Shopify Admin and choose Allow or Keep blocked, with a recorded reason.
Start on the free plan and screen your next order.
A short walkthrough of the risk most merchants never check for, and what the app does about it: where screening happens, what a held order looks like, and what a reviewer sees before deciding.
The player is loaded from YouTube only after you press play, and may set YouTube cookies.Watch on YouTube
01 — SCREENING
What gets screened, how it scores, and what happens next.
The app reads the same maintained sanctions screening index as the rest of MatchAudit. It does not keep a second copy of the lists, and it never treats missing data as a no-match result.
Automatic order and customer screening
Screening starts from Shopify's order and customer events. The billing, shipping, customer and company names on an order are normalized for spelling and punctuation and compared with listed names and aliases, including word-order, phonetic and transliterated variations. The shipping country is assessed separately for country risk.
Why it matters: No one has to remember to check an order: every order is screened before you ship it, including the ones that arrive overnight.
Triggers: new orders and customers from Shopify, plus a Shopify Flow action to screen an order on demand.
Optional: hold every new order until its screening has finished (tag matchaudit-pending while it runs).
If a list cannot be screened, the order is held for review rather than marked as having no match.
Match scores and review thresholds
Every possible match gets a score with a plain-language breakdown of how it was reached, next to the matched public-list record and the dataset version behind it. Date of birth, country and city raise or lower the score when both records contain them.
Why it matters: Your reviewer sees why a name was flagged, so a common name that is obviously a different person can be ruled out in one read.
Three thresholds: Conservative flags more possible matches, Balanced is the default, Strict flags fewer names and can miss broader spelling variations.
The score is a review signal, not proof that two records are the same person.
Fulfillment holds and order tags
A score at or above your threshold, a high-risk shipping country or a restricted party places a MatchAudit hold on the order's eligible fulfillment orders and tags the order matchaudit-review-required. Optionally, the result is also written to Shopify's order risk analysis.
Why it matters: Goods don't leave the warehouse while a match is open, and your team can find every order that needs a look with one tag filter.
Releasing a review hold is a deliberate human action in Shopify Admin. MatchAudit never cancels, refunds or edits the order.
Every screened order gets the order field "MatchAudit screening status" (pending, clear, review_required or blocked).
On the free plan, orders beyond the monthly allowance are tagged matchaudit-not-screened so nothing is silently skipped.
The point of the app is the decision, not the alert. Fulfillment pauses, a named person decides, and what they decided survives the staff member who made it.
Match review workflow
Each flagged order becomes a case in Shopify Admin with the screened parties, the score breakdown, the listed record, the country result and the party's Directory status. The reviewer edits the prepared rationale and chooses Allow (releases the MatchAudit hold) or Keep blocked (leaves it in place).
Why it matters: Decisions are made by a named person with a written reason, which is what an auditor or your bank will ask to see.
The reviewer's identity is taken from the verified Shopify session, never from a form field.
Duplicate open cases for the same order are grouped so one current case remains to decide.
Allowed and blocked parties are remembered in the Directory; a restricted party holds future orders for review.
Optional
AI-assisted explanations — the decision stays human
For a flagged case the app can prepare a plain-language ALLOW or BLOCK recommendation and a proposed rationale, written for a merchant rather than a sanctions specialist. Deterministic rules override any unsafe suggestion.
Why it matters: Your team understands a case faster — but AI never makes the final pass/fail decision and cannot release a hold. A staff member must press the button.
Missing source data, an unavailable country check, a high-risk country, a Directory restriction or a strong sanctions match can never be shown as fine to allow.
Customer names, street addresses and order and customer IDs are not sent to the AI provider (OpenAI).
Switch AI explanations off in Settings to send nothing; screening, holds and the deterministic recommendation stay the same.
Alerts through Shopify Flow
The app adds two triggers and one action to Shopify Flow, so screening fits the automations a store already runs. A flagged order can email your team or start any other Flow step, with a link to the case.
Why it matters: Nobody has to keep the app open: the right person hears about a flagged order when it happens.
Triggers: Order flagged for sanctions review, and Order screening cleared.
Action: Screen order for sanctions.
One alert per order for the same findings; MatchAudit alerts again only when something new is found.
Alert fields carry the reason, the matched lists, the score and a review link — not the customer's name or address.
Put a review step in front of every flagged order.
What you can hand to an auditor — and the customers you already accepted.
Records are append-only and linked by hashes, and list updates re-check the parties you already let through.
Paid plans
Evidence records and exports
Every screening and reviewer decision is written to an append-only record with the list version, the matched-entry hash, the algorithm version, the threshold, the country-risk result, the timestamp and the reviewer. Each record carries the hash of the one before it, and a correction is added as a new record rather than overwriting the old one.
Why it matters: When someone asks how you screened an order months ago, you can export the answer instead of rebuilding it from screenshots.
Evidence records module (paid plans, switched on in Settings): policy acknowledgements, review notes, AI gap scans and private exports.
Export a single case as a PDF, or a date range as PDF or JSONL, through short-lived private links.
Decisions are recorded on every plan; exports need a paid plan.
Paid plans
Re-screening when a sanctions list changes
When a list you selected is updated, the app re-checks the customers you already accepted and surfaces anyone who now matches, without anyone starting a scan.
Why it matters: A customer designated after their first order is caught before their next one ships.
Covers parties active in the last 90 days; each party can be excluded from monitoring in the Directory.
Open cases are re-checked on every plan, so no case is decided against an outdated list.
List-update re-checks are included and do not use your screening allowance.
US OFAC SDN and Consolidated, EU Consolidated Financial Sanctions, UN Security Council, UK Sanctions List, Swiss SECO and the US Consolidated Screening List — plus Australian, Canadian and eight EU national lists, and other US risk lists.
Shipping-country risk and your own rules
Country risk draws on the FATF lists, the EU list of high-risk third countries and further indicators. Your own country rules can make the result stricter, never weaker.
Directory of screened parties
A per-store roster of every screened customer, billing and shipping party and company, with its full screening and decision history and single or bulk re-screening.
Historical order screening
One unattended screen of past orders during onboarding or on demand, plus CSV upload for older or off-platform records. Results never apply a hold or refund on their own.
Fail-closed by design
A missing connection, missing list coverage or a stale list version never produces a no-match result. The order opens a manual-review case and is held instead.
Data handling
Separate database with per-store isolation enforced in the database. Customer names, addresses, dates of birth and access tokens are encrypted before storage; Shopify redaction requests are honoured.
WORKS WITH SHOPIFY FLOW
Let Shopify Flow handle the follow-up
Shopify Flow is Shopify's automation tool: when something happens in your store, it runs the steps you choose. MatchAudit adds two triggers and one action to Flow, so a screening result can start the follow-up your team would otherwise do by hand.
Your team hears about flagged orders straight away
When MatchAudit flags an order, Flow can send an internal email, or run any other Flow action, with a link to the case. Nobody has to keep checking the app.
Charge the card only after an order is cleared
If your store captures payments manually, connect Order screening cleared to Flow's Capture payment action. The card is charged once screening is clear or a reviewer allows the order.
Add Screen order for sanctions to any workflow, for example when an order is tagged for review. Each run uses one screening from your plan.
No customer names in MatchAudit's alert fields
The alert fields carry the reason, the names of the matched lists, the match score and a review link, never the customer's name or address.
One alert per order for the same findings
MatchAudit alerts again only when something new is found, the order's hold had to be placed again, or after your team decides, so alerts stay worth reading.
What MatchAudit adds to Flow
Trigger: Order flagged for sanctions review. Starts when MatchAudit flags an order: a possible sanctions match, a high-risk billing or shipping country, or a check that could not finish.
Trigger: Order screening cleared. Starts when an order has no sanctions match and no high-risk country, or when a reviewer allows it.
Action: Screen order for sanctions. Screens an order whenever your own workflow says so. Each run uses one screening from your plan.
Flow automates the follow-up. A person on your team still reviews every flagged order and decides.
Built for stores where who receives the order matters.
International shippers
You ship to many countries and can't check every name by hand. MatchAudit screens each party and the destination country on every order, and holds only the ones that need a look.
High-risk product categories
Dual-use goods, drones, electronics, crypto mining hardware, lab supplies or B2B exports — products where who receives them matters as much as where they go.
Stores selling near sanctioned regions
Orders to countries that border sanctioned jurisdictions or act as transit hubs, where a party match and the country result together decide whether an order should wait for review.
Sell into any of these markets? Screen before you ship.
Every plan screens orders, holds fulfillment and runs the review workflow. Paid plans add volume, evidence exports and re-screening when a list changes. Prices in USD per month.
Free
$0/ month
20 screenings a month
20 AI explanations a month
Holds, review cases, Directory and Shopify Flow
Evidence exports (paid plans)
List-update monitoring (paid plans)
Stops at the allowance until next month
Starter
$23/ month
100 screenings a month
50 AI explanations a month
Holds, review cases, Directory and Shopify Flow
Evidence records and exports
Re-screening when a list changes
$0.18 per extra screening
Growth
$63/ month
500 screenings a month
250 AI explanations a month
Holds, review cases, Directory and Shopify Flow
Evidence records and exports
Re-screening when a list changes
$0.12 per extra screening
Scale
$159/ month
2,000 screenings a month
1,000 AI explanations a month
Holds, review cases, Directory and Shopify Flow
Evidence records and exports
Re-screening when a list changes
$0.08 per extra screening
High Volume
$899/ month
50,000 screenings a month
10,000 AI explanations a month
Holds, review cases, Directory and Shopify Flow
Evidence records and exports
Re-screening when a list changes
From $0.05 per extra screening, lower at volume
Plans are chosen, billed in USD and cancelled inside your Shopify admin. Shopify shows the price again before you approve any charge.
On paid plans, screenings beyond the allowance are billed by Shopify at the rate shown. Usage charges have a monthly limit, by default equal to the plan price, which you can change in the app's Billing page.
On the free plan, screening stops at the monthly allowance until the next month; later orders are tagged matchaudit-not-screened.
Human decisions, case management and Flow triggers are never charged separately.
The Shopify App Store listing is the authoritative price list. Install from there and choose a plan inside the app.
There is nothing to integrate. Install the app from the Shopify App Store, approve its permissions and review the defaults in Settings: which lists to screen, the match threshold, your country rules and whether new orders wait for screening. New orders are screened from then on.
What about false positives?
Common names will sometimes look like a listed entry. Each case shows the score breakdown and the listed record, and date of birth, country and city lower the score when they differ, so a reviewer can rule out a different person quickly. A Strict threshold flags fewer names but can miss broader spelling variations. Once your team allows a case, you are alerted again only if something new is found.
What happens when an order matches?
The app opens a review case, places a MatchAudit hold on the order's eligible fulfillment orders, tags the order matchaudit-review-required and fires the Flow trigger Order flagged for sanctions review. A staff member reviews the case and chooses Allow, which releases the hold, or Keep blocked. MatchAudit never cancels or refunds the order.
How is customer data handled?
The app runs on its own database with per-store isolation enforced in the database. Customer names, addresses, dates of birth and Shopify access tokens are encrypted before storage. AI explanations never receive customer names, street addresses or order and customer IDs, and can be switched off. MatchAudit UG (haftungsbeschränkt) is based in Germany and processes personal data under the GDPR.
Which lists can I screen against?
You choose per store: US OFAC SDN and Consolidated, the EU consolidated financial sanctions list, the UN Security Council list, the UK Sanctions List, Swiss SECO, the US Consolidated Screening List, Australian and Canadian lists, eight EU national lists and other US risk lists.
How do I cancel?
Switch plans or cancel in your Shopify admin at any time; Shopify handles the billing. When you uninstall the app, Shopify ends the subscription, and retroactive screening reports are deleted.
WHAT IT DOES NOT DO
The honest boundaries.
Worth reading before you install, and worth showing to whoever signs off on your controls.
Screening is decision support, not legal advice, and not a determination that a person or company is sanctioned.
Screening can miss a relevant party or flag an unrelated one. The underlying records always need human review.
MatchAudit does not cancel orders, issue refunds, freeze funds or file reports with any authority.
Without Shopify's approved read_all_orders scope, historical screening is limited to the most recent 60 days of orders.
Sanctions screening is a separate MatchAudit product from Customer Assurance, with its own app, subscription and database.
Install it on your store and screen your next order.
Start on the free plan and see screening, holds and reviews on your own orders before you pay for anything.
