| Guide | GDE-006 |
| Topic | Corporate investigation |
| Domain | Financial intelligence |
| Last updated | June 2026 |
Short answer: Search the company on OpenCorporates and the primary registry, extract and cross-reference its directors and officers, follow the shareholder chain to a natural person, then screen the entities and individuals against ICIJ Offshore Leaks, OpenSanctions and OCCRP Aleph.
What is corporate OSINT?
Corporate OSINT is the structured use of public company registries, leaked records databases, and sanctions lists to trace a company from its registration record to its directors, shareholders, parent entities, and ultimate beneficial owner.
A company name in a contract, a vessel registration, a property deed. That is usually where a corporate investigation starts: a legal entity with a name, an address, and a registered jurisdiction. The goal is to find the natural person behind it. Every legal company must file with government authorities. Those filings leave a trail of directors, shareholders, registered agents, and parent entities that can be followed layer by layer until a real individual appears at the end of the chain. That individual is the ultimate beneficial owner: the person who owns or controls the entity regardless of how many intermediate layers stand between them and the filing.
Corporate structures are layered deliberately. In legitimate business, layering serves tax, liability, and operational purposes. In illicit finance, corruption, and sanctions evasion, it serves concealment. The investigative method is identical in both cases: systematic registry querying, cross-reference of director and officer names across jurisdictions, and pattern recognition in shared addresses, registered agents, and naming conventions. The structure does not tell you which category you are in. The evidence at the end of the chain does. When a corporate investigation intersects with vessel ownership, the maritime OSINT guide covers the additional layers specific to flag state and ship management structures.
| • | Identifying the directors, shareholders, and ultimate beneficial owner of an unfamiliar or opaque company |
| • | Mapping ownership structures that span multiple jurisdictions or rely on shell companies, trusts, or nominee arrangements |
| • | Conducting due diligence on a counterparty, vendor, or potential partner where registry-level verification is required |
| • | Investigating a company suspected of sanctions evasion, corrupt contracting, or illicit financial flows |
How to investigate a company with OSINT
A six-step workflow from initial registration lookup through director cross-referencing, ownership chain mapping, offshore leaks screening, sanctions checking, and adverse media review.
The following tools are used across the steps below. All are free unless noted.
OpenCorporates: The largest open database of company information, aggregating official registry data from over 140 jurisdictions. Search by company name to retrieve registration number, registered address, incorporation date, jurisdiction, status, and officer names, with links to the source national registry. Free for individual searches; API access requires registration.
UK Companies House: The gold standard for corporate transparency. All UK company filings are publicly accessible and free: full accounts, confirmation statements, director appointment and resignation history, and persons with significant control (PSC) records that name beneficial owners with more than 25% ownership or control. Free.
ICIJ Offshore Leaks Database: Maintained by the International Consortium of Investigative Journalists. Searches over 800,000 offshore entities from the Panama Papers, Paradise Papers, Pandora Papers, and other major leaks. Returns companies, officers, shareholders, intermediaries, and the connections between them, with interactive network visualisation. Free.
OpenSanctions: Aggregates international sanctions lists and politically exposed persons (PEP) databases into a single searchable dataset. Covers OFAC, EU, UN, UK, and dozens of other jurisdictions. Search by company name or individual to check for sanctions designation. Free for non-commercial use.
OCCRP Aleph: Investigative document and data search platform maintained by the Organised Crime and Corruption Reporting Project. Indexes millions of leaked documents, public records, court filings, and corporate data from OCCRP investigations. Useful for contextual adverse media and prior investigative coverage of a company or its officers. Free with registration.
Sayari Graph: Commercial platform for cross-jurisdictional beneficial ownership and trade data, particularly useful when OpenCorporates hits a wall on jurisdictions with low public disclosure standards. Paid. Relevant for complex multi-jurisdictional structures where public registry chains terminate without reaching a natural person.