Skip to content
The Diligence ReviewCorporate investigations, explained

Due Diligence

The Reputation Audit Before a Deal

How a reputation audit works before a deal: media and court records, public roles, political exposure and the limits of what public sources can show.

A researcher scanning a spread of newspapers and printouts on a table with a highlighter in hand.
A researcher scanning a spread of newspapers and printouts on a table with a highlighter in hand.

A reputation audit is the part of a corporate check that reads the public record for the things a register will never show. Registers record filings and facts. Reputation lives in court reporting, in the press, in regulatory decisions, in professional directories and in the visible history of a person's public roles. The audit gathers those traces and asks whether they fit together.

What a reputation audit is asked to establish

The question is rarely as simple as whether someone is reputable. A more useful version is whether the public record contains anything that would change a decision, and if so, whether it is a settled fact or an unresolved allegation. A board considering a director, a bank considering a client, a company considering an acquisition: each needs to know what the record shows about the people behind the entity, not only the entity itself. The audit is built around that question and its scope is written down before the work starts.

Where the record lives

The sources are public and lawful. Court records and reported judgments show litigation, findings and sanctions. Regulatory registers show licences, enforcement notices and disqualifications. Media archives, both general and trade, show how a person or company has been reported over time. Professional and corporate directories show roles, appointments and resignations. Public social media and published interviews can reveal stated positions that sit oddly with a written account. Each source has its own reliability, and part of the skill is knowing how much weight each deserves.

The first pass is broad and cheap: a structured search across these sources for the names involved. The second pass is narrow and careful: reading the material that appears relevant in full, rather than trusting a headline. A single alarming headline often dissolves on reading; a single innocuous mention sometimes opens a line that matters.

The difference between an allegation and a finding

This distinction is the heart of the work. An allegation is a claim made by someone. A finding is a conclusion reached by a body with the authority to reach it, such as a court, a regulator or a disciplinary panel. The two must never be presented as the same thing, both because it is inaccurate and because it exposes the client to a claim of defamation. A useful report records where each item sits on that scale, and dates it, because a settled matter and an open one have very different weight.

The same discipline applies to context. A person named in a fraud case may be the accused, the victim, a witness or an unrelated party with the same name. Common names produce false matches, and a check that ignores this will produce a report full of noise. Verification of identity, through dates of birth, addresses, company roles and other markers, is what separates a reputation audit from a search.

Political exposure and public roles

Public roles carry their own risk. A person who holds or has held a prominent public function, or who is close to someone who has, is treated as higher risk in anti-money-laundering rules, which is the origin of the term politically exposed person. The relevance extends beyond money. Public office, party roles, state contracts and directorships of state-owned companies can all create conflicts that a commercial counterparty needs to understand. The audit records these roles with their dates and their sources, and leaves the judgement of significance to the reader, unless the scope asks otherwise.

Media patterns rather than single stories

A single article is a weak signal. A pattern is a strong one. The audit looks for repetition: the same allegation from independent sources, the same counterparty appearing across separate disputes, a business that attracts complaints wherever it operates, a public figure who resigns from roles shortly before questions are asked. It also looks for absence, which is harder to read. A person with a long business career and no public trace at all may simply be private, or may have worked hard to stay out of sight. Neither conclusion is safe on its own, and the report should say so.

The limits of public sources

A reputation audit knows only what has been published. Court records are incomplete in many jurisdictions, especially at first instance, and settlements are often confidential. Media coverage is uneven and reflects the interests of publishers as much as the importance of events. Local-language sources are frequently missed by searches run in English. Records are removed, corrected and archived. A responsible report names these limits rather than implying that a clean search means a clean history. The honest formulation is that the audit found nothing in the sources consulted, and lists what those sources were.

There is also a legal boundary. Public does not always mean lawful to process. Data protection rules in some countries restrict how personal information gathered from public sources may be stored and used, and a check that ignores this can create a liability of its own. The glossary of investigation terms defines the politically exposed person status and the related vocabulary used in these reports.

How the audit fits the wider check

A reputation audit is one strand of a broader due diligence exercise. It usually runs alongside a register search, an ownership check and, where relevant, a market check. Its findings feed the same report and are weighed with the same care. Where the record raises something that cannot be settled from public sources, the next step may be a discreet enquiry rather than more searching, and at that point the work has moved from audit toward investigation.

Where to read investigative reporting

The Organized Crime and Corruption Reporting Project publishes cross-border investigations into exactly the kind of structures a reputation audit is looking for, and its archive is a useful secondary source. The address is occrp.org.