III The Method
What Filings Never Record
A registry records what was declared and when, which leaves intent, the reason a director left and the dispute that settled outside it by design.
A company register is a notice system. It exists so that a person dealing with a company can establish who is answerable for it, where process may be served, and what has been formally declared. It was not built to describe conduct, and it does not.
This firm's own diligence page compresses the consequence into two sentences. Documents tell you what happened. People tell you why. Read as a claim about sources that is a preference; read as a claim about instruments it is harder, because the distance between a filing and an explanation is not a defect in the filing system. It is the filing system working as designed.
What the register says it is for
The United Kingdom has written the registrar's purpose into statute. Section 1081A of the Companies Act 2006, inserted by the Economic Crime and Corporate Transparency Act 2023, requires the registrar to seek to promote four objectives: proper delivery of documents; accuracy and completeness of the register; that the records kept do not create a false or misleading impression to members of the public; and the prevention of unlawful activity by companies or its facilitation. Identity verification became compulsory for incorporations and new appointments on 18 November 2025.
That is a serious reform. Now read the objectives for what they do not contain. Each is a property of a document. Not one is a property of a decision. A perfectly verified register will record that a director was appointed on one date and ceased to hold office on another, both correctly. It will not record the meeting.
Eight things that cannot be filed
Intent. A structure is filed as ownership at a date. Two identical charts, one built for ordinary commercial reasons and one built to defeat a claim not yet issued, file identically. Purpose is not a reportable field.
Why a director actually left. One narrow exception exists, and its narrowness is the argument. Item 5.02(a) of the SEC's Form 8-K requires a registrant to disclose a resignation occurring because of a disagreement over its operations, policies or practices known to an executive officer, to describe the circumstances briefly, and to file any letter the director sends in reply. That reaches registrants, where the disagreement is known, and the first account is the company's. Everywhere else a departure is a date on a form.
The agreement that was never filed. Shareholders' agreements, side letters, options over shares, undertakings given to a lender. The register carries the shareholding, not the arrangement governing how it is voted.
Informal control. Beneficial ownership regimes reach declared control and, increasingly, verified identity. They do not reach deference: the person who appears nowhere, holds nothing, and has never once been overruled.
A dependency on a single relationship. Accounts may disclose customer concentration. They do not disclose that the concentration is a person: one buyer whose successor will not honour an understanding, one banker carrying a facility on judgement rather than covenant.
Payment behaviour that never became a dispute. Here the United Kingdom publishes something. Companies above the statutory size thresholds report payment practices twice a financial year, and the 2024 amending regulations extended the regime to 6 April 2031 and added the value of invoices unpaid within agreed terms. That yields an average and a trend, not the supplier held at ninety days because it could not afford to litigate and could not afford to lose the account.
A dispute settled before it was filed. Most commercial disagreements never reach a claim form, and the register of judgments in England and Wales holds less than assumed. Under the 2005 regulations a judgment given after a contested hearing is not registered until a further step occurs, such as an instalment order or a step to enforce; a judgment satisfied within one calendar month has its entry cancelled rather than endorsed; entries are removed six years from judgment in any event. The record is built to forget, and it forgets fastest where the defendant paid at once, which is where the defendant was best resourced.
Reputation among the people who left. No filing describes how a business behaves towards a supplier under pressure, or why a layer of an organisation turned over inside a year. This firm's diligence page lists reputation according to current and former employees among the things a report should contain; there is no field for it anywhere.
What answers instead
The people around a subject: former colleagues, counterparties, communities. Alongside them, standing networks of local authorities — community and political leaders, academics, religious authorities, officials and businesspersons — tested for reliability over time rather than assembled at the point of need. The claim made for them is modest and it is not a claim to secret material. They know things that were never written down, because the things were never the kind that gets written down.
What it costs
It is slow. The sequence does not compress: establishing who would know, establishing why they would say, then hearing it, rarely in one conversation. A firm quoting the same turnaround for this as for a database report is quoting for the database report.
It does not always produce. Some enquiries are properly scoped, properly conducted and return nothing. The fee is for the enquiry, not the finding, and any other arrangement pays the investigator to keep an unpromising line warm.
Sources have interests. The dismissed executive, the losing bidder, the partner bought out at a price they still resent. Almost every account of consequence arrives with a reason it is being given. The discipline is to record the interest beside the account, and to notice when two accounts that appear to corroborate each other have one origin.
The law is a design constraint, not a disclaimer. Enquiry about a person is regulated wherever it is worth conducting. Under the UK GDPR, where personal data have not been obtained from the data subject, the controller must ordinarily inform them. Section 77 of the Data (Use and Access) Act 2025, in force since 5 February 2026, restated the exemptions: the impossible-or-disproportionate-effort ground moved to Article 14(5)(e), and a new 14(5)(f) covers an obligation that would seriously impair the objectives of the processing. Section 170 of the Data Protection Act 2018 makes it an offence to obtain personal data knowingly or recklessly without the controller's consent. In the United States, 15 U.S.C. section 6821 makes it unlawful to obtain customer information of a financial institution by a false statement to the institution or its customer.
Those provisions mark the outer edge of the technique. An enquiry is conducted so that it could afterwards be described to the person it concerned, and where a question can only be answered by committing an offence it comes back unanswered. That occasionally loses the answer the client most wanted, and it remains the only version worth buying, because material obtained unlawfully is a liability transferred to the client.
The objection worth answering
The strongest case against human enquiry is not cost; it is that it cannot be audited. A registry extract can be handed to a regulator, a court or an investment committee. An account from a former colleague cannot be handed to anyone. Most of that has to be conceded. Where the requirement is a file that will withstand review, the database and the registry pull are the correct products, they are cheaper, and a firm that pretends otherwise is selling the wrong thing.
What cannot be conceded is the inference. The silence of a document is not evidence of absence, and it is habitually read as though it were: a search returning nothing adverse is reported as a subject with nothing adverse, when the instrument was never capable of holding the adverse thing. Auditability is in any case a matter of form rather than of source — the source described by position and access rather than name, the interest recorded beside the account, confidence stated rather than implied, and a line held between what was said, what was corroborated and what is inferred.
What is actually being bought
Access to records is not scarce and is becoming less so; a firm whose product is retrieval is selling into a falling market and knows it. What remains scarce is knowing what an instrument was designed to hold, which questions fall outside it, who would know the answer anyway, and what an interested account is worth. That is judgement applied to an omission, and it is the thing being paid for. A firm that sells the record charges for the whole of the work and delivers the half anyone can buy.
The instruments described here are public statutes and filing requirements. Nothing here is legal advice, and the lawful basis for any particular enquiry in any particular territory is a question for counsel there.
The method sits under Due Diligence Investigations, the standing networks under Local Subject Matter Experts, and the casework built on both under Corporate Intelligence & Investigations Group.
Sources
- Companies Act 2006, section 1081A (the registrar's objectives), inserted by the Economic Crime and Corporate Transparency Act 2023
- Companies House confirms identity verification rollout from 18 November 2025 (GOV.UK)
- The Register of Judgments, Orders and Fines Regulations 2005 (SI 2005/3595), regulations 9, 11 and 26
- US Securities and Exchange Commission, Form 8-K (Item 5.02 - Departure of Directors or Certain Officers)
- The Reporting on Payment Practices and Performance (Amendment) Regulations 2024 (SI 2024/444)
- Data (Use and Access) Act 2025, section 77 (information to be provided to data subjects)
- The Data (Use and Access) Act 2025 (Commencement No. 6 and Transitional and Saving Provisions) Regulations 2026 (SI 2026/82), regulation 2 - section 77 in force 5 February 2026
- Data Protection Act 2018, section 170 (unlawful obtaining etc of personal data)
- 15 U.S.C. section 6821 - Privacy protection for customer information of financial institutions
- Privy Consul - Due Diligence Investigations (Our Process)