Updated February 2026 · 6-minute read
A practical playbook for compliance managers and public sector teams who must screen visitors, vendors, and workforce against LEIE and SAM, while keeping audit-ready, FOIA-friendly records.
At a Glance
Why it matters
Use this guide to
HHS Office of Inspector General
The List of Excluded Individuals/Entities identifies parties barred from participating in federal healthcare programs. Used by hospitals, insurers, and any organization receiving Medicare/Medicaid funding.
System for Award Management
The SAM.gov exclusion list covers suspended or debarred parties for federal contracts and awards. Any entity doing business with the federal government must be verified clean before award.
Disclaimer: This guide is for informational purposes only. It does not constitute legal advice. Consult qualified counsel for your specific obligations.
Onboarding a new vendor, contractor, or long-term visitor before access is granted.
Before access to sensitive programs, controlled areas, or systems is approved.
Periodic re-checks for recurring contractors or extended engagements.
Whenever key identity details change: legal name, corporate ownership, or updated EIN/DUNS.
Good documentation is the difference between a clean audit and a corrective action plan. Every check needs these five elements.
Identity
Full name, DOB (if available), org/site
Evidence
Screenshot or result ID + timestamp
Reviewer
Who ran the check and their decision
Outcome
No match / Potential match / Confirmed match
Notes
Escalation path and follow-up date
Audit Link
Record the check inside your audit log with traceable IDs for secure, scoped export.
Full name + supporting DOB or identifier. Avoid initials only.
Retain source links, result IDs, or screenshot evidence.
Reviewer adjudicates; unclear cases are escalated.
Append-only record: decision, evidence, reviewer, timestamp.
Scoped, redacted logs for program auditors or records requests.
Public sector teams and healthcare partners need exports that stand up to audits and FOIA requests. Keep results tied to a clear request ID, reviewer, timestamp, and a redacted payload. Exports should be scoped by organization to prevent cross-tenant leakage, and avoid storing unnecessary PII while still proving that checks were performed.
SecurePoint USA can include LEIE and SAM as optional lists (both are off by default). Screening volume is subject to the fair-use caps on each plan. Append-only audit logs and exportable evidence packs give you the artifacts you need for reviews, without over-sharing PII.
For deeper screening context, see our sanctions and visitor screening and the Compliance Hub.
Get occasional notes on sanctions, export controls, and visitor compliance when we publish them.
No spam. Unsubscribe anytime.
Related posts
More guidance on sanctions, export controls, and visitor management for regulated facilities.
