Digital due diligence: beyond the commercial registry

Beyond the commercial registry

Traditional due diligence consults commercial registries, annual accounts, trade references. It's necessary, but insufficient. The commercial registry tells you that a company exists and who its directors are. It doesn't tell you if those directors have pending litigation, if they appear in journalistic investigations, or if their digital reputation suggests problems.

Digital due diligence complements traditional verification with open source analysis: online presence, mention history, visible connections, digital behavior patterns.

What to look for about a potential partner

Narrative coherence: Does what they say about their trajectory match what appears online? Discrepancies between the CV presented and verifiable LinkedIn history. Previous companies that don't appear, or that appear with different information.

Public litigation and conflicts: accessible court decisions, press mentions of commercial disputes, recurring negative comments from former partners or employees.

Connection network: Who are they publicly associated with? Connections with problematic people or companies can be warning signs.

Digital behavior: tone on social media, type of content shared, public interactions. It's not determinative, but offers context about personality and values.

Critical supplier verification

A supplier with access to sensitive data, internal systems, or critical processes deserves additional scrutiny. Digital due diligence can reveal:

History of publicly reported security breaches or incidents. Reviews from other customers in specialized forums. Staff turnover visible through LinkedIn changes. Discrepancies between proclaimed capabilities and verifiable evidence.

A common case: companies claiming 'over 20 years of experience' but whose web domain was registered three years ago.

Key candidate evaluation

For critical hires—executives, personnel with access to sensitive information, positions of trust—traditional reference verification is insufficient. References provided by the candidate will always be positive.

Open source analysis can reveal: coherence of declared professional history, presence on sanction or exclusion lists, public behavior on networks that contradicts declared values, connections with competitors or conflicting parties.

Important: this verification must comply with data protection regulations and be proportionate to the position.

Legal and ethical limits

Digital due diligence has clear limits. It only works with publicly accessible information. It doesn't include access to private profiles, purchase of personal data, or intrusive techniques.

The information obtained must be used proportionally and justifiably. Verifying if a CFO candidate has public litigation is reasonable. Tracking the personal life of a junior employee is not.

At Zero101, each verification follows documented protocols that guarantee legal compliance and proportionality.

When to request digital due diligence

Not every business relationship requires exhaustive investigation. Cases where it provides most value:

Before signing a partnership or joint venture agreement. When selecting suppliers with access to sensitive data or critical systems. In hiring for high-responsibility positions. When there are warning signs that require additional verification.

The cost of professional verification is minimal compared to the cost of a bad decision based on incomplete information.