Open-source due diligence: what good evidence looks like

Define the decision before collecting data

Due diligence works best when the reason for the enquiry is clear. An investor assessing a commercial partner, a business onboarding a supplier and an organisation reviewing a prospective appointment do not necessarily need the same research.

Identify the entities, jurisdictions, relevant time period and decision that the research is intended to support. A bounded scope reduces irrelevant collection and makes the eventual findings easier to understand.

Identity resolution comes first

Names are not unique identifiers. Similar names, alternative spellings, trading styles and changes in corporate ownership can lead to the wrong person or company being connected to a record.

Before treating a record as relevant, check compatible identifiers and context, such as company registration details, known professional roles, addresses where appropriate, dates and independently corroborated connections. If identity remains uncertain, state that openly.

• Keep a record of the original source and when it was accessed.
• Separate direct evidence from secondary reporting and inference.
• Explain why a record has been attributed to a particular entity.
• Preserve contradictory information rather than hiding it.

A negative result is not proof of absence

A search that finds no concerning information does not establish that no concern exists. Sources have different coverage, search results change and some records may not be publicly available or may be restricted.

Equally, the presence of an allegation is not proof that it is true. Good reporting identifies source reliability, dates, legal or procedural status where verifiable and whether the information has been corroborated.

Present findings so they can be challenged

A defensible report provides an executive summary, a clear methodology, linked evidence and explicit limitations. Readers should be able to trace a material conclusion back to the information supporting it.

Research must also respect applicable law, legitimate purposes, privacy expectations and data-handling obligations. Public availability of information does not by itself remove those responsibilities.

Turn research into a decision

The strongest conclusion is not always a simple approval or rejection. It may be a request for additional documentation, a targeted clarification, a stronger contractual control or a decision to pause while a material gap is resolved.

SANTRIL Verify and DeepSweep are designed around evidence-led investigation and usable reporting. Their value depends on transparent sources, careful interpretation and the ability to distinguish what is known from what remains uncertain.