What Does a Corporate Investigator Actually Do?

Updated 5 October 2026 by Investigation Bureau

A corporate investigator establishes the facts a business needs before it acts. Is the counterparty what it claims to be? Does the executive's history match the CV? Who leaked the data, where did the money go, and is the whistleblower right? The work sits between the general counsel, the board, HR and the forensic accountant. It is instructed when being wrong would be expensive and the facts are not in the company's own files. This guide explains what corporate investigators do in the UK, how an engagement runs, where the legal boundaries lie, how privilege works and what it costs.

The term covers a broad trade, so it helps to say first what a corporate investigator is not. Not a lawyer, although the best work is instructed through one. Not a forensic accountant, who analyses the numbers the investigator finds. Not a security consultant or a penetration tester. And not a private detective in the matrimonial sense, even though the same disciplines are used (surveillance, tracing and open-source research) and simply pointed at commercial questions.

The work, by type

Due diligence on counterparties. Before a contract, an investment, a joint venture or an acquisition, the questions are whether the company is real, solvent and honestly run, and whether it carries litigation, sanctions or reputational problems that the data room left out. Our guide to due diligence on a business partner covers the free checks and the point where professional work starts.
Executive and pre-appointment vetting. Checking that a senior hire's qualifications, career, directorships, litigation history and public conduct are what the CV and the interview suggested. Our guide to executive due diligence explains what a report covers and why boards commission one.
Internal investigations. Fraud, theft, bribery, expenses abuse, conflicts of interest, harassment and misconduct, investigated independently so that the findings stand up before a tribunal, a regulator or a court.
Whistleblowing. Establishing whether a disclosure is substantiated, in a way that protects the whistleblower and gives the board a defensible basis for its next step.
Intellectual property and departing employees. Evidence that a leaver took client lists or designs, solicited colleagues or customers in breach of restrictive covenants, or set up in competition while still employed. Both surveillance and open-source research are used.
Conflicts of interest and undisclosed directorships. Employees and suppliers are cross-referenced against company registers, property records and public sources to find the interests that nobody declared.
Supplier and procurement fraud. Ghost suppliers, kickbacks, related-party invoicing and inflated contracts, proved from documents and company records.
Data leaks and insider threat. Finding the source of a leak from its pattern: what left, who had access and where it surfaced.
Asset tracing and litigation support. Finding assets to enforce against, locating witnesses, establishing a pattern of life and serving evasive respondents. Our guide to how investigators trace hidden assets sets out how far the lawful reach extends.
Technical surveillance countermeasures. Sweeping boardrooms and executive offices for listening devices before sensitive negotiations.

How an engagement runs

It starts with a scoping conversation, free and confidential, about what the business needs to know and which decision the answer will inform. A written scope and a fixed price follow from that. Where litigation is in prospect or the matter is sensitive, the instruction usually comes through the company's solicitors, so that the work attracts legal privilege. We advise clients to think about this at the start and not at the end.

Next comes the desk phase. It covers registers, filings, litigation, property, sanctions, the press and the wider digital footprint of the people and companies involved. We run it on our in-house OSINT tooling, and every query is logged. Most due-diligence instructions are answered at this stage. Where they are not, the work moves into the field: discreet enquiries, interviews conducted to a standard a tribunal accepts, surveillance where it is proportionate, and forensic support where devices or accounts are involved.

You receive a written report. It separates what was established from what was inferred, cites a source for each finding, states its confidence plainly and says what remains unknown. It is structured so that a board can read the first page and a lawyer can rely on the rest. If the matter goes further, our investigators support the disciplinary process, the litigation or the police report, and can give evidence about how the material was obtained.

The legal boundaries

Corporate investigation in the UK is governed by the general law, and a competent investigator treats the boundaries as part of the craft.

Data protection. Personal data is processed under UK GDPR on a documented lawful basis, usually a legitimate interest weighed against the rights of the individual. We are registered with the ICO as a data controller (ZC259849).
Deception. Obtaining personal data by deception is an offence under the Data Protection Act 2018.
Unauthorised access. Accessing accounts or systems without authority is an offence under the Computer Misuse Act 1990.
Interception. Intercepting communications is prohibited by the Investigatory Powers Act 2016.
Competitor intelligence. It is lawful when it draws on open sources, and unlawful when it involves pretexting or inducing a breach of confidence.

Due diligence under the Bribery Act 2010, sanctions screening and the register of persons with significant control are routine parts of counterparty work, and whistleblower protections shape how internal investigations are run.

A finding is no use to you if the investigator will not explain how it was obtained. Every report we write says how.

How a corporate investigator differs from a forensic accountant

On most large fraud matters the two work side by side. A forensic accountant analyses financial records that the company already holds, or obtains through disclosure, and reconstructs what the numbers show. A corporate investigator establishes the facts around the numbers: who the counterparties really are, which directors stand behind which companies, where the assets went, what the individuals did and said, and what the public record shows that the ledgers do not. In a procurement fraud, the accountant proves the invoices were inflated. The investigator proves that the ghost supplier is the purchasing manager's brother-in-law.

What it costs

Corporate instructions are quoted as a fixed price for an agreed scope, after a free, confidential first conversation, so the board knows the cost before it approves the work. Background checks, verification work and executive due-diligence reports are quoted per subject, according to the depth required. For surveillance, typical UK market rates are £500 to £1,200 per operative per day. Internal investigations are scoped and timetabled individually, as is due diligence across several jurisdictions, where cross-border work is handled with trusted partners. Our corporate investigations page describes the service in full.

Frequently asked questions

What is the difference between a corporate investigator and a private investigator?

The disciplines are the same: surveillance, tracing, open-source research and evidence handling. The difference is that they are pointed at commercial questions and not personal ones, such as due diligence, internal fraud, IP theft, executive vetting and litigation support. Corporate work is more often instructed through solicitors, and more often ends before a tribunal, a regulator or a court.

Do I need a corporate investigator before a merger or a major contract?

Yes, if the counterparty's honesty, solvency or reputation would change your decision and the data room cannot prove them. Due diligence on the people and companies behind a deal costs little relative to the deal itself, and it is one of the most common reasons a business instructs an investigator.

Can a corporate investigator access bank records or private emails?

No. Bank records and private communications can be obtained only through the bank's own processes, a court order or the police. What an investigator can lawfully establish is who the people and companies are, what the public and company records show, what people did and said, and where assets can be found. That is usually what makes a disclosure application succeed.

Is a corporate investigation confidential and privileged?

It is always confidential. It is privileged where the instruction is structured properly, which usually means through the company's solicitors when litigation is contemplated. Raise this in the scoping conversation, because privilege is easier to establish at the start than to claim later.

How long does corporate due diligence take?

Desk-based due diligence on a UK counterparty or executive is typically delivered within days. Multi-jurisdiction work, internal investigations that involve interviews and matters that involve surveillance are scoped and timetabled at the outset.

Is it legal to investigate a competitor?

Yes, from open sources: filings, press coverage, public statements, patents, planning applications, job adverts and the digital footprint of the business and its people. It is unlawful to obtain confidential information by deception, to induce employees to breach confidence, or to access systems without authority. We refuse those methods, and so will any reputable firm.

A commercial question that needs an answer before you act. Put it to an investigator in confidence. The first conversation is free, without obligation and scoped to the decision in front of you: send a confidential enquiry.