Corporate due diligence is the disciplined process of checking whether the people, ownership, claims, relationships and risk profile behind a proposed business decision stand up to independent scrutiny. It can be relevant before an acquisition, investment, joint venture, supplier appointment, senior hire, litigation strategy or high-value commercial relationship. At Trojan Investigations, our role is not to replace solicitors, accountants, auditors or regulated financial advisers. It is to test facts, identify inconsistencies, trace lawful information sources and turn fragmented intelligence into a clear, evidenced picture for the client and their professional advisers.
The strongest due diligence does not start with a suspicion that somebody is dishonest. It starts with a defined question: what must be true for this transaction or relationship to be acceptable, and what evidence would materially change the decision? That approach keeps enquiries relevant, proportionate and useful rather than becoming an unfocused trawl through a person or company.
Published: 8th December 2024 | Updated: 21st September 2026
Direct answer: what can a private investigator add to corporate due diligence?
A private investigator can independently verify identities, companies, directors, ownership links, trading footprints, public records, litigation indicators, sanctions exposure, adverse information and real-world operating claims using lawful sources. We can also identify contradictions that merit deeper legal, financial or technical review. We cannot access private bank accounts, confidential tax records, police databases, private messages or other protected data simply because a client wants a fuller picture.
What Corporate Due Diligence Actually Means
Due diligence is not one single search. It is a structured assessment of the risks attached to a transaction, counterparty or individual. The precise scope should change according to the decision being made. A supplier check may focus on ownership, operating history, solvency indicators and sanctions risk. An acquisition may require far deeper work on control, connected parties, litigation, reputational issues and the credibility of management representations. A prospective business partner may require identity verification, corporate history and conflict checks.
Our business investigations work is therefore built around an agreed scope and evidential questions. We distinguish between facts, reasonable inferences, allegations and unresolved gaps. That distinction matters because due diligence is designed to improve decision quality, not to produce a dramatic narrative.
| Due diligence question | What investigation may establish | What it should not be mistaken for |
|---|---|---|
| Who actually controls the company? | Registered officers, persons with significant control, related entities, historic changes and corroborating open-source links. | A guarantee that every beneficial interest has been disclosed or that a nominee arrangement does not exist. |
| Is the business genuinely operating? | Trading footprint, premises indicators, websites, public filings, supplier/customer references where appropriate and physical verification where lawful. | An audit of turnover, stock, tax or cash reserves. |
| Are there material integrity concerns? | Documented litigation, regulatory findings, sanctions designations, adverse media and verified inconsistencies. | A character verdict based on rumours or unverified posts. |
| Do management claims match the evidence? | Chronology, directorships, qualifications where verifiable, business history and contradictions between representations and records. | A substitute for legal warranties or contractual protections. |
Why 2026 Due Diligence Is Different from a Few Years Ago
The UK corporate information environment has changed materially. Companies House identity verification became a legal requirement from 18 November 2025, with directors and people with significant control required to verify in accordance with their applicable deadlines. That is a meaningful reform, but it does not remove the need to corroborate corporate information. Identity verification is not the same thing as validating every commercial claim a company makes, proving the origin of funds or confirming that a counterparty is low risk.
Sanctions screening has changed too. From 28 January 2026 the UK Sanctions List became the only source for all current UK sanctions designations, replacing the old OFSI Consolidated List. A current due diligence process should therefore use the current list and consider ownership and control issues rather than checking names mechanically.
Large organisations must also account for the corporate offence of failure to prevent fraud, which came into force on 1 September 2025. The offence can apply where an associated person commits a specified fraud offence intending to benefit the organisation or, in some circumstances, its client, and reasonable fraud-prevention procedures were not in place. That makes third-party and counterparty risk assessment more than a box-ticking exercise for affected organisations.
A Practical Corporate Due Diligence Investigation
1. Define the decision and risk threshold
We establish why the check is being commissioned, what the client already knows and which findings would actually affect the decision.
2. Confirm the subject precisely
Similar company names, reused trading names and common personal names create false-positive risk. Company number, full legal name, date-of-birth data where lawfully available and jurisdiction matter.
3. Map ownership and control
We review officers, PSC information, historic appointments, parent or related entities and changes that may explain the current structure.
4. Test management and business representations
We compare statements about history, experience, premises, market activity or relationships against independent sources.
5. Review legal, regulatory and sanctions indicators
Relevant public material is assessed in context, with close attention to identity matching and whether a record is current, historic, resolved or disputed.
6. Investigate material red flags
Only issues capable of affecting the decision are developed further. The objective is corroboration, not volume.
7. Report with confidence levels and gaps
A professional report should explain what is verified, what remains uncertain, which sources support the finding and what specialist follow-up may be needed.
Companies House: Valuable, but Not a Complete Due Diligence Answer
Companies House is central to UK corporate research. It can show incorporation data, filing history, officers, PSC information, charges and other statutory filings. Current identity-verification reforms strengthen the register, but investigators should still avoid treating a registry entry as proof of every underlying commercial fact. Filing dates, historic addresses, dormant status, rapid changes of officers, repeated incorporations and unusual corporate networks can all deserve context.
For a significant transaction, we usually compare corporate filings with the wider operating picture. Does the business present the same ownership elsewhere? Are its stated locations credible? Do directors appear connected to entities that were not disclosed? Is the chronology coherent? These are investigative questions rather than accounting conclusions.
Directors, Senior Managers and Key Individuals
People often matter as much as the entity. A company may have a clean-looking current profile while its decision-makers have a complex history of failed ventures, regulatory issues, litigation or undisclosed conflicts. Equally, a person may share a name with somebody appearing in adverse records, so identity resolution is essential before any concern is reported.
We may review career claims, directorship history, business associations, professional memberships where publicly verifiable, civil litigation indicators and credible reporting. We do not obtain criminal-record data outside the lawful channels available for the relevant purpose, and a private investigator cannot simply request a Standard or Enhanced DBS certificate for any person or role.
Sanctions, Ownership and Control Checks
A sanctions check is more than searching a company name. Names may be transliterated, entities may operate through subsidiaries, and sanctions can attach through ownership or control rules even where the immediate counterparty is not itself named. Current UK screening should use the UK Sanctions List and, where the transaction warrants it, consider ownership and control as well as direct designation.
A sanctions search is not a universal compliance certificate
Matching a name requires careful identity resolution; failing to find a direct name match does not prove that sanctions risk is absent. High-risk or regulated transactions should be reviewed with the client’s legal and compliance advisers.
Financial Warning Signs Without Pretending to Be an Auditor
Investigators can identify publicly visible warning indicators: overdue filings, charges, insolvency history, repeated dissolved entities, litigation, unexplained corporate restructuring or inconsistencies between public claims and statutory records. We can also help trace public asset and corporate links where relevant. That is different from auditing accounts, confirming bank balances or establishing the source of funds from protected banking data.
Where a question is fundamentally accounting-based, the correct next step may be forensic accounting. Where it concerns legal ownership, warranties or transaction structure, it may require solicitors. Good due diligence identifies when another specialist should take over rather than overstating what investigation alone can prove.
Adverse Media and Online Research: Evidence Quality Matters
Search engines can produce a great deal of information but not all of it is reliable. Old stories may be republished without an outcome; accusations may be mistaken for findings; several people may share a name; automated company profiles may repeat errors. We therefore record source provenance, date, identity match and whether a claim is allegation, finding, opinion or verified fact.
Publicly accessible information can still be personal data. The fact that material appears online does not remove data-protection responsibilities. Where personal information is processed, the controller needs a lawful basis and must consider necessity, fairness, relevance and retention. The ICO’s legitimate-interests guidance was updated in March 2026 following the Data (Use and Access) Act changes.
Site, Trading and Operational Verification
Sometimes the key question is simple: does the business appear to exist and operate as claimed? Depending on the mandate, lawful enquiries can help verify premises, signage, trading activity, reported staffing indicators or whether an address appears to be residential, serviced, virtual or operational. These observations must be recorded accurately. A quiet site on one day does not prove a company is inactive; it is one piece of evidence to compare with the wider picture.
International Due Diligence
Cross-border work introduces different company registries, privacy rules, languages, naming conventions and record quality. A UK-style Companies House search cannot simply be replicated everywhere. We therefore state the limits of each jurisdiction and avoid presenting the absence of an accessible record as proof that an event or relationship never existed.
What We Will Not Do
Professional due diligence has firm boundaries
- We do not hack email, messaging, cloud or social-media accounts.
- We do not obtain protected bank, tax, NHS, police or government records through deception.
- We do not present rumour as fact or create a negative profile to justify a client’s pre-existing view.
- We do not promise that a person or company is “safe”; risk decisions remain with the client and their advisers.
- We do not use surveillance simply because it is technically possible. It must have a defined, lawful and proportionate purpose.
Red Flags That Often Justify Deeper Review
Red flags to investigate rather than assume
- Ownership that changes repeatedly or shortly before a transaction.
- Senior people whose stated employment history conflicts with public records.
- Addresses, telephone numbers or websites shared across apparently unrelated entities without explanation.
- Unusual reluctance to provide basic corporate documents or beneficial-ownership information.
- Material litigation or regulatory history omitted from representations.
- Unexplained gaps between reported scale and visible operational footprint.
- Sanctions, politically exposed or high-risk connections that require specialist compliance review.
- Pressure to complete before normal checks can be carried out.
None of these points automatically proves wrongdoing. Their value is that they tell the client where further evidence, contractual protection or specialist advice may be needed.
What a Good Due Diligence Report Should Look Like
A useful report is decision-ready. It should identify the exact subject, scope and period checked; explain the sources used; separate facts from allegations and inference; highlight material rather than trivial issues; identify unresolved gaps; and make clear where specialist legal, financial or compliance interpretation is required. Screenshots or raw search results without analysis are not due diligence.
Where enquiries may feed into litigation, our legal and litigation support work places additional emphasis on chronology, source preservation and reporting that can be explained later. If surveillance is genuinely justified, our surveillance services are scoped separately and proportionately rather than treated as a routine component of every corporate check.
When Should a Business Commission Enhanced Due Diligence?
Enhanced investigation is particularly useful where the value, jurisdiction, reputation risk or complexity exceeds what a basic registry and sanctions check can answer. Examples include acquisitions, investment, major supplier appointments, high-value agency relationships, suspected undisclosed conflicts, complex ownership, contradictory management information or a counterparty connected to higher-risk markets.
The objective is better decisions, not more data
Effective corporate due diligence gives decision-makers a defensible understanding of what is known, what is uncertain and what should happen next. If you need a scoped assessment, you can book a confidential consultation.
Sources and References
- Companies House / GOV.UK — Verifying your identity for Companies House; When you need to verify your identity for Companies House (updated 2026).
- Companies House / GOV.UK — How to meet Companies House identity verification standard (updated 19 June 2026).
- Foreign, Commonwealth & Development Office and HM Treasury — UK sanctions guidance and UK Sanctions List changes effective 28 January 2026.
- Office of Financial Sanctions Implementation — Financial sanctions general guidance (updated 12 May 2026).
- Home Office — Economic Crime and Corporate Transparency Act 2023 guidance on the failure to prevent fraud offence, effective 1 September 2025.
- Information Commissioner’s Office — Legitimate interests guidance, updated 23 March 2026 following Data (Use and Access) Act changes.
- Data Protection Act 2018 and UK GDPR.
- Companies Act 2006 and Economic Crime and Corporate Transparency Act 2023.