Foreign companies are walking a tightrope between their need for business intelligence to comply with U.S. sanctions and mounting concerns about the risks of carrying out due diligence.