Disclaimer: This article is for education and for lawful, authorised professional research. Use these methods only where you have a legitimate purpose and a lawful basis, and follow the laws and platform terms that apply to you, including data protection law such as the UK GDPR and EU GDPR. See our Terms of Service.
TL;DR
- Entity resolution is the process of confirming that records from different sources (a company register, a website, an email domain) refer to the same organisation or the same professional role.
- Manual checks with search operators and official registers are essential for verifying automated results, but they do not scale.
- UserSearch Corporate Intelligence brings company registers, officer records, LEI data and sanctions lists together, alongside Email, Phone and Username Intelligence.
- Compliance matters: keep personal data to what your due diligence purpose needs, and follow the UK GDPR and any sector rules that apply.
In business research, an "organisation" is rarely a single tidy record. It is spread across many sources: an entry on the UK company register, a trading website, a LinkedIn company page, an email domain, a regulator's list and a handful of trade directories. For the OSINT analyst, the challenge is not just finding these records; it is connecting them into a coherent, verifiable picture that stands up to scrutiny.
This process is called entity resolution. It is the disciplined work of taking separate signals (a company name, a registration number, a domain, a director appointment, a phone number on a website) and confirming that they belong together. It is how you establish that "Harbour Lane Trading" on a supplier invoice is the same Harbour Lane Trading Ltd listed on the register, and not a similarly named business in another jurisdiction. It is the difference between guessing and knowing, between a lead and evidence.
In this guide, we go beyond basic name searches. We look at the methodology of verifying organisations and professional roles, the manual checks that underpin it, and how to use UserSearch to bring the sources together while keeping your research proportionate.
The Verification Triangle: Theory of Verification
Before you type a company name into a search bar, it helps to understand the geometry of verification. In professional research, a single data point is just a dot: a lead. Two data points create a line: a hypothesis. Three independent data points form a stable triangle. This mirrors the principles of record linkage in data science, where probabilistic matching connects records across databases.
To verify an organisation with high confidence, you generally need to connect three distinct kinds of source:
- The Public Presence: What the organisation says about itself online. This includes its website, LinkedIn company page, social media accounts and press releases. It tells you how it presents itself, who it says it works with and what it claims to do. It answers: What does the organisation want us to see?
- The Official Record: Where the organisation exists on paper. This includes company registers, officer appointments, filed accounts, regulator lists and LEI records. It anchors the online presence to a legal entity. It answers: Which legal entity is accountable?
- The Technical Record: The identifiers the organisation uses to operate: domains, email addresses, phone numbers and hosting. This is often the connective tissue that links the public presence to the official record. It answers: Do these belong to the same operation?
The Triangle in Practice:
If you find "Brightwater Analytics Ltd" on the company register with a registered office in Leeds (Official), a domain brightwater-analytics.example whose historical registration uses the same company name and address (Technical), and a LinkedIn company page that lists the same registration number (Public), you have closed the triangle. The probability of three unrelated organisations sharing all three of these intersections is very small.
Why It Matters: Due Diligence and Risk
Why go to this effort? Why not just search the company name? Because mistaken matches derail research, damage reputations and create liability. In high-stakes legal and due diligence work, relying on a single source can be costly.
The Common Name Problem
Searching for "Apex Solutions" returns thousands of results across dozens of countries. There are likely hundreds of companies with that name or something close to it. Without a secondary identifier (a registration number, an LEI, a domain or a registered address), manual searching is little more than a guess. Entity resolution lets you filter those thousands of results down to the single entity you are dealing with.
Fraud Prevention and "Thin" Entities
Some fraudulent operations rely on "thin" businesses: a newly registered company, a template website and a free email address, sometimes borrowing the name or number of a genuine firm. A real trading business usually has a record that spans years: filed accounts, old versions of its website, trade association listings and supplier references. Finding nothing on an organisation that claims a long history is often as telling as finding an adverse report. Careful verification exposes these gaps by showing where the history does not hold together.
The Manual Method (The "Hard Way")
Understanding manual verification matters because it teaches you to spot false positives in automated tools. You need to know where the data comes from and how to reproduce findings with standard search engines and official registers.
1. Boolean Search Operators
Google is powerful if you speak its language. Most searches are loose. Analysts use Boolean operators to force precision, and Google's own guide to refining searches is the place to start.
The Exact Name Match:
Enclosing a name in quotes forces Google to find that exact string, so you avoid pages where the words appear separately.
"Brightwater Analytics"The Jurisdiction Anchor:
If you know the country or city where the business operates, include it. This is essential for common names.
"Brightwater Analytics" AND ("Leeds" OR "UK" OR "United Kingdom")The Sector Pivot:
If you know the sector, use industry keywords to filter out the noise.
"Brightwater Analytics" AND ("data" OR "consultancy" OR "software" OR "analytics")The Exclusion:
If the business shares a name with a famous brand, exclude terms related to that brand so relevant results come to the top.
"Apex Solutions" -gaming -legends -esports2. The Image Pivot
If an organisation's website shows photos of its offices, team or products, run them through a reverse image search (Google Lens or TinEye). Do the same images appear on stock photo sites or on another company's website? A genuine business usually has its own photos, which also appear in local press, trade show listings or partner announcements. Finding an "office" photo on a stock library is a quick, useful signal that the web presence needs closer checking.
3. Handle Correlation
If you find a business handle like @brightwater_data on one platform, search for that exact string on others. Organisations tend to reuse the same handle across their social accounts, support forums and code repositories. You can check this manually by adding the handle to platform URLs, or with command-line tools like Sherlock if you are comfortable in a terminal:
pipx install sherlock-project
sherlock brightwater_data --timeout 10The first line installs the tool; the second checks the handle across supported sites, with --timeout limiting how long each site check waits. Expect false positives on common handles. For a fuller method, see our username research guide.
4. Official Register Checks
In the UK, the Companies House register is free to search and shows company status, filing history, registered office and officer appointments. Other jurisdictions have their own registers, and aggregators like OpenCorporates bring many of them together. Public legal filings can add context too, and we cover them in our guide to official legal registers. A simple search such as "Brightwater Analytics" site:gov.uk can also turn up regulator notices and public contracts.
The Pivot: UserSearch Corporate Intelligence
Manual searching works, but it does not scale. It means visiting dozens of sites, solving captchas and logging every find by hand. UserSearch gives you access to 100+ third-party data sources through one UserSearch account, so you do not need separate accounts with each provider.
1. Company and Officer Records
The Corporate Intelligence Search type brings the official record into one place:
- Company Search and Officer Search (Companies House, UK) return company details and officer appointments from the UK register.
- Company Search and Director Search (OpenCorporates) extend the same checks to many other jurisdictions.
- LEI Search (GLEIF) returns Legal Entity Identifier records, useful for confirming a counterparty in financial transactions.
- Company Sanctions (OpenSanctions) checks the entity against sanctions and watchlists.
Seeing these results side by side lets you confirm that the registration number, the registered office and the officers all line up, and spot where one source disagrees with another.
2. The Technical Record
Once the official record is in place, check the technical side. Domain Intelligence shows who registered the organisation's website and when, and Email Intelligence shows where the organisation's contact address is registered and how long it has been in use. Phone Intelligence does the same for the number on the website or invoice. With OneScan, you can run one input across several selected data sources and see the merged results with source attribution; the Credit cost is the sum of the sources you select and is shown before you run it.
3. Professional Role Checks
Due diligence often includes confirming that a named director or signatory holds the role they claim. Keep this focused on the role: check the officer appointment on the register, the person's listing on the company's own website and any regulator register that applies to their profession. That is usually enough to confirm the role without gathering anything beyond what the purpose needs.
Advanced Strategies and Use Cases
Once you have the raw data, the real analysis begins. Here are three strategies analysts use to turn data points into verified findings.
The Registered Address Pivot
Scenario: A procurement team is onboarding "Northmoor Facilities Ltd". The register shows a registered office at a formation agent's address.
Action: Search the register for other companies at the same address and compare their incorporation dates and officers.
Outcome: Hundreds of companies share the address, which is normal for formation agents and not a concern in itself. But three of them share Northmoor's director and were dissolved within a year of incorporation. That pattern does not prove anything, but it justifies asking Northmoor for trading references and filed accounts before signing.
The Domain and Register Cross-Check
Scenario: A payments team receives bank detail changes from [email protected].
Action: Run the domain through Domain Intelligence and compare the registration date with the company's incorporation date and the domain on its filed documents.
Outcome: The company was incorporated in 2016 and its filings list a different domain. The domain in the email was registered nine days ago. The team calls the supplier on the number held on file, confirms the request is not genuine, and records the findings in a Case.
The Sanctions and Ownership Check
For higher-risk counterparties, run the company and its listed officers through the sanctions Modules and check the LEI record for parent relationships. A match is a lead to confirm, not a conclusion: compare dates of birth where the register shows them, nationality and appointment history before you escalate. Record exactly which source returned which result, so a reviewer can follow your reasoning.
Legal and Ethical Guardrails
Researching organisations often touches personal data about the people who run them, so it carries real legal and ethical weight.
Public information only:
OSINT relies on publicly available information. Accessing accounts, or persuading people to reveal information under false pretences, is unlawful under the Computer Misuse Act 1990 in the UK, and similar laws apply elsewhere. Keep your research to open, lawful sources.
Proportionality:
Under the UK GDPR, collect only what your purpose needs. For due diligence on a company, that usually means register data, officer appointments and business contact details, not personal social media or family information.
US decisions on employment, tenancy and credit:
If you work in the United States, the Fair Credit Reporting Act (FCRA) governs information used for employment, tenancy, credit and insurance decisions. Use providers regulated under that Act for those decisions, and use OSINT for research and due diligence.
Stop Guessing, Start Verifying
Entity resolution is no longer just for large compliance departments. With the right method, you can cut through the noise to confirm which organisation you are really dealing with. Whether you are checking a new supplier, verifying a company for a story or reviewing a counterparty, combining manual verification with multi-source research is your best defence against costly mistakes.
Don't rely on a single search. Build the triangle, verify the record and document the evidence.
Stop guessing. Start researching with UserSearch. Run company, domain and email checks from one account on UserSearch, keep your results in a Case and turn them into a report.
Research Hygiene Note
Keep your research passive. Review public pages and registers rather than contacting the organisation's staff through social platforms before you are ready. Use a dedicated research browser, keep your searches in a Case with Forensic Mode when you need a record, and use Private mode when you do not. Capture key pages with Forensic Capture so your evidence carries SHA-256 fingerprints and timestamps.