Researching a company — the core of due diligence — answers who really owns and controls it, and what risks hide behind the public face. It relies on public records patiently linked together until an opaque structure becomes a clear chain of control.
What you'll need
- The company's exact legal name and jurisdiction
- Company-research tools from the People & Company Research category
- Dataset and disclosure sources from the Data Acquisition category
Steps
- Pull the registry record. Start with the official corporate registry for its jurisdiction: incorporation date, status, registered address, directors, and — where available — shareholders and beneficial owners.
- Map ownership and affiliates. Follow directors and shareholders to other entities they control. Shell structures and holding companies often connect a target to owners it does not advertise.
- Check litigation and sanctions. Search court records, regulator actions, and sanctions and watchlists for the company and its principals. These reveal risk the marketing never will.
- Map the digital footprint. Apply the footprinting method to the company's domains and infrastructure; hiring pages, tech stack, and subdomains expose scale, plans, and hidden brands.
- Assess reputation. Mine news, reviews, and forums for adverse media and recurring complaints — a fast read on how the company actually behaves.
- Document with sources and confidence. Record every finding against its source, and clearly separate established fact ("the registry lists X as director") from assessment ("X appears to control the group").
Common pitfalls
- Confusing similar names. Verify jurisdiction and registration number — many companies share a name.
- Stopping at the public face. The registered entity may be a front; follow ownership to the people behind it.
- Presenting assessment as fact. Label inferences honestly, or the report cannot be defended.
Verify your result
You have researched the company when you can present its true ownership and control, its litigation and sanctions exposure, its digital footprint, and its reputation — each traceable to a public source, fact separated from assessment. A relationship diagram of owners and affiliates makes the structure legible.