Company Due Diligence in 2026: The UK Corporate Intelligence Framework

The Economic Crime and Corporate Transparency Act 2023 (ECCTA) has fundamentally altered how UK professionals conduct company due diligence. With Companies House now wielding statutory powers to query, reject, and remove false information, the baseline for corporate verification has shifted from passive data collection to active intelligence gathering. Relying on static, self-reported accounts is a direct regulatory and commercial risk for solicitors, lenders, and corporate finance advisers.

Company due diligence is the systematic process of investigating a business or individual before entering a transaction, partnership, or credit agreement. Modern due diligence requires moving beyond surface-level filings to uncover operational integrity, hidden liabilities, and ultimate beneficial ownership (UBO).

The Three Pillars of Modern Due Diligence

Effective intelligence gathering is categorised into three distinct layers, each serving to mitigate specific commercial threats and satisfy distinct regulatory obligations.

1. Financial and Insolvency Assessment

This involves scrutinising a company's balance sheet, cash flow, and debt profile to establish its true liquidity. Under s.123 of the Insolvency Act 1986, a company is deemed unable to pay its debts if it fails to satisfy a statutory demand for a sum exceeding £750 within 21 days. Due diligence must identify the precursors to insolvency before they result in a formal petition.

Key investigative areas include:

2. Legal and Regulatory Compliance

With the tightening of the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017), regulated businesses must perform robust Know Your Customer (KYC) and Anti-Money Laundering (AML) checks.

This pillar ensures the target entity is not subject to sanctions, involved in active litigation, or operating without necessary permissions. For financial services firms, this means cross-referencing the entity against the Financial Conduct Authority (FCA) register to confirm authorisation status and check for published regulatory interventions.

3. Structural and Network Intelligence

Understanding who truly controls a business is vital. This involves mapping out corporate structures to identify UBOs and analysing director networks.

Investigators must look beyond the immediate board of directors to see if key individuals have a history of 'phoenixing' failed companies (where a new company is formed to take over the business of an insolvent company, leaving debts behind) or are associated with entities previously subject to compulsory liquidation.

Statutory Framework and Compliance

The UK regulatory landscape has shifted towards proactive enforcement. The following table outlines the primary statutory drivers dictating the scope of due diligence:

| Statute / Authority | Focus Area | Impact on Due Diligence Requirements |

| :--- | :--- | :--- |

| ECCTA 2023 | Identity Verification | Requires all directors and Persons with Significant Control (PSCs) to verify their identity. Unverified directors raise immediate compliance flags. |

| MLR 2017 (as amended) | AML / KYC | Mandates enhanced due diligence for high-risk transactions, complex ownership structures, and Politically Exposed Persons (PEPs). |

| Companies Act 2006 | Statutory Filings | s.441 dictates the strict period allowed for laying and delivering accounts. Breaches indicate poor governance. |

| The Gazette | Insolvency Notices | The official public record for statutory notices regarding liquidations, petitions, and winding-up orders. |

| Insolvency Act 1986 | Creditor Action | Defines the parameters for statutory demands and winding-up procedures, setting the timeline for creditor escalation. |

Realistic Worked Example: Project Apollo

Consider a corporate finance boutique advising a mid-market private equity firm on the acquisition of a UK-based logistics company ("Target Ltd"). On paper, Target Ltd reports strong EBITDA and holds valuable regional distribution contracts.

The Investigation:

The advisory team begins standard due diligence. A basic check of the Companies House register shows Target Ltd is 'Active' with accounts filed up to date. However, applying a deeper structural and financial analysis reveals several anomalies:

1. Network Risk: The sole director of Target Ltd recently resigned from three other logistics firms exactly two months before each entered creditors' voluntary liquidation (CVL).

2. Hidden Security: A review of the company's mortgage register reveals a newly registered debenture containing fixed and floating charges in favour of an alternative bridging lender, filed just three weeks ago. This suggests traditional banking facilities were withdrawn or exhausted.

3. Impending Insolvency: A targeted search of The Gazette reveals a winding-up petition was presented by HMRC against Target Ltd five days ago for unpaid PAYE and VAT liabilities.

The Outcome:

Because the advisory team conducted enhanced due diligence rather than relying solely on the target's data room, they identified the HMRC petition before the bank accounts were frozen under s.127 of the Insolvency Act 1986. The private equity firm immediately paused the transaction, saving millions in potential capital loss and avoiding association with a financially distressed entity.

Decision Framework: The 8-Step Due Diligence Checklist

When onboarding a new corporate client, assessing a major supplier, or evaluating a merger target, follow this structured framework to ensure no critical risks are overlooked:

1. Verify Entity Status: Confirm the exact legal name and company registration number (CRN). Ensure the status is 'Active' and not 'Active - Proposal to Strike off'.

2. Analyse the PSC Register: Identify the Persons with Significant Control. Map the ownership chain upwards until you identify the human Ultimate Beneficial Owners (UBOs).

3. Cross-Reference Directors: Check all current and recently resigned directors against the Insolvency Service's disqualified directors register.

4. Review Filing Cadence: Examine the filing history for late accounts, frequent changes to accounting periods, or sudden changes in auditors.

5. Assess Secured Debt: Pull the full charges register. Look for outstanding MR01 forms and note the identity of the charge holders.

6. Conduct a Petition Check: Perform a comprehensive winding up petition search to ensure no creditors have commenced compulsory liquidation proceedings.

7. Screen for Sanctions and PEPs: Run the entity and its UBOs through global sanctions lists (OFSI, OFAC, UN) and PEP databases to satisfy MLR 2017 requirements.

8. Establish Ongoing Monitoring: Due diligence is not a one-off event. Implement continuous tracking for changes to the target's risk profile.

How Professionals Traditionally Manage Due Diligence vs Corp Intel

Traditionally, conducting thorough company due diligence is a fragmented and highly manual process. A solicitor or credit manager might start by downloading PDFs from Companies House, manually mapping out corporate structures on a whiteboard, and setting calendar reminders to check for late filings. To assess insolvency risk, they must run daily manual searches across The Gazette, hoping they catch name variations or OCR errors, while separately logging into credit reference portals to check for CCJs. This disjointed approach is slow, expensive, and leaves significant room for human error-especially when a supplier's risk profile changes weeks after the initial onboarding check.

Corp Intel replaces this fragmented workflow by aggregating official UK data sources into a single, structured intelligence platform. Instead of manually cross-referencing directors across multiple tabs, professionals can instantly visualise complex corporate networks and historic insolvency links. Furthermore, rather than relying on manual periodic reviews, firms can deploy free company monitoring to receive automated alerts the moment a target company files new accounts, registers a new charge, or is subject to a Gazette notice.

By centralising comprehensive company search capabilities, Corp Intel allows advisory and credit teams to move from reactive, point-in-time checking to proactive, continuous intelligence gathering, ensuring their risk assessments are always defensible and up to date.

FAQ

Q: What is the difference between basic and enhanced due diligence?

A: Basic due diligence involves verifying the identity of the client and confirming the company's legal existence. Enhanced Due Diligence (EDD) is a regulatory requirement for higher-risk scenarios (such as dealing with PEPs or entities in high-risk jurisdictions). EDD requires a deeper investigation into the source of funds, source of wealth, and the broader corporate network.

Q: How does the ECCTA 2023 affect my due diligence process?

A: The Act grants Companies House greater powers to query, challenge, and remove information. Crucially, it introduces mandatory identity verification for all new and existing company directors and PSCs. In practice, professionals must now check if a director's identity has been officially 'verified' on the register; unverified directors will soon face penalties and represent a significant compliance red flag.

Q: Can I rely solely on Companies House for corporate verification?

A: No. While Companies House is a vital starting point, it operates primarily as a registry, not an investigative body (though ECCTA is changing this slowly). You must supplement registry data with credit reports, adverse media searches, CCJ data, and insolvency notices from The Gazette to build a complete risk profile.

Q: How quickly do winding-up petitions appear on public registers?

A: A winding-up petition does not immediately appear on Companies House. It is only advertised in The Gazette at least seven working days after it is served on the company, and at least seven working days before the court hearing. Monitoring The Gazette and court cause lists is essential, as waiting for Companies House to update its status to 'In Liquidation' means you are reacting weeks or months too late.

Q: What is the difference between a PSC and a UBO?

A: A Person with Significant Control (PSC) is a statutory definition under UK law (typically someone holding more than 25% of shares or voting rights). An Ultimate Beneficial Owner (UBO) is a broader AML concept referring to the natural person who ultimately owns or controls the entity. While a PSC is often the UBO, complex corporate structures can obscure the true UBO behind nominee shareholders or offshore trusts.

Q: Why is checking the charges register so important during an acquisition?

A: The charges register reveals secured debt. If you acquire a company without understanding its registered charges, you acquire its encumbered assets. If the target defaults, the charge holder (e.g., a bank) has the right to seize those assets, superseding the rights of unsecured creditors and shareholders.

***

For professionals requiring defensible, real-time corporate data, explore Corp Intel's suite of advanced corporate reports to automate your due diligence workflows and protect your firm from hidden commercial risks.