Define the relationship to the country
Incorporation, headquarters, beneficial ownership, customer location and payment corridors can carry different relevance. Store them separately.
Use layered sources
Combine binding restrictions, relevant high-risk-jurisdiction guidance, internal experience and banking-partner constraints. Record which source caused the outcome.
Review continuously
Country and sanctions information changes. Assign an owner, source, effective date and review cadence to every rule.