Guides

14 guides. Each cites its sources and carries a review date.

Diligence

How to read a company dossier What each part of an OpenDossier counterparty file means, how the evidence chain works, and why there is no single trust score.
Sanctions and watchlist screening Which lists to screen against, how to handle false positives, how ownership rules extend a listing to unlisted subsidiaries, and how often to re-screen.
Vendor and partner diligence for companies adopting AI A practical checklist for assessing an AI supplier: entity, ownership, financial signals, security attestations, data handling, model provenance, sub-processors, IP indemnity and continuity.
Beneficial ownership and control How beneficial ownership is defined, which jurisdictions publish it, which keep private registers, where none exists, the current US position, and how control is evidenced when no register helps.
Monitoring a counterparty after signing Which events matter after a contract is signed, where the signals come from, how often to look, and how to avoid alert fatigue.

Entity resolution: telling same-name companies apart How to make sure a record belongs to the company you are checking, using registration numbers, CJK name forms, romanisation rules and address and officer cross-checks.
Litigation and regulatory records Where court and regulator records come from in the US, Singapore, Hong Kong, Taiwan, Japan, Canada, Australia and the UK, and how to present an allegation, a pending case and a decision fairly.
Employee and client feedback as evidence How reviews and testimonials can be used in a counterparty file without overstating them: sampling bias, verifying the relationship, licensed review data, small-team anonymity, right of reply and the FTC rule.

Reading SEC filings for private-company diligence What Form D does and does not reveal about a private company, how to use 10-K, 10-Q and 8-K for public counterparties, and how to query EDGAR full-text search, APIs and XBRL data.
Company registries compared What the main company registries in Singapore, the UK, the US, Japan, Taiwan, Hong Kong, Australia, New Zealand, Canada and Malta disclose, what is free, and whether ownership is public.

SOC 2 vs ISO 27001 vs ISO 42001 (and ISO 27701) What each framework is, who issues the report or certificate, how long it takes, what it typically costs, and which buyers ask for which.
A trust profile for procurement How security questionnaires such as SIG and CAIQ work, how a data room and a claimed profile let a company answer once and reuse evidence, and what to publish versus keep private.

Building an AI Assurance Dossier What enterprise procurement asks about an AI system and how to assemble the answers as dated evidence, mapped to the EU AI Act, ISO/IEC 42001 and the NIST AI RMF.

GEO: how AI assistants describe your company How large-language-model assistants obtain company facts, what you can publish so they get them right, how to monitor their answers and how to correct the record without gaming it.