Weighing Historical Geopolitical Ties in Vendor Security Assessments for Sensitive Data

An analyst is conducting a security assessment of an identity verification vendor whose founders presented at a technology event at the Kremlin in 2013 and received initial funding from a Russian state fund, with some early investors later being sanctioned. The vendor restructured its operations in 2022-2023, moving its headquarters to London/Cyprus and claiming to have cut all ties with Russia. The analyst asks how other security teams evaluate historical geopolitical connections versus the current corporate structure for a service handling sensitive government identification data.