What Does a Corporate Investigator Actually Do?

Updated 6 September 2026 by K3K Investigations

A corporate investigator establishes facts a business needs before it acts: whether a counterparty is what it claims, whether an executive's history matches their CV, who leaked the data, where the money went, whether the whistleblower is right. The work sits between the general counsel, the board, HR and the forensic accountant, and it is instructed when the cost of being wrong is high and the facts are not in the company's own files. This guide explains what corporate investigators do in the UK, how an engagement actually runs, the legal boundaries, the question of privilege, and what it costs.

The phrase covers a wide trade, so it helps to start with what it is not. A corporate investigator is not a lawyer, though the best work is instructed through one. Not a forensic accountant, who analyses the numbers the investigator finds. Not a security consultant or a penetration tester. And not a private detective in the matrimonial sense, although the same disciplines of surveillance, tracing and open-source research are used, pointed at commercial questions.

The work, by type

Due diligence on counterparties. Before a contract, an investment, a joint venture or an acquisition: is the company real, solvent, honestly run and free of litigation, sanctions and reputational problems that the data room did not mention? Our guide on due diligence on a business partner covers the free checks and where professional work begins.
Executive and pre-appointment vetting. Verifying that a senior hire's qualifications, career, directorships, litigation history and public conduct are what the CV and the interview suggested. Our guide to executive due diligence explains what a report covers and why boards commission it.
Internal investigations. Fraud, theft, bribery, expenses abuse, conflicts of interest, harassment and misconduct, investigated independently so that the findings survive a tribunal, a regulator or a court.
Whistleblowing. Establishing whether a disclosure is substantiated, in a way that protects the whistleblower and gives the board a defensible basis for what it does next.
Intellectual property and departing employees. Evidence that a leaver took client lists or designs, solicited colleagues or customers in breach of restrictive covenants, or set up in competition while still employed. Surveillance and open-source research both feature.
Conflicts of interest and undisclosed directorships. Cross-referencing employees and suppliers against company registers, property records and public sources to find the interests nobody declared.
Supplier and procurement fraud. Ghost suppliers, kickbacks, related-party invoicing and inflated contracts, proved from documents and company records.
Data leaks and insider threat. Establishing the source of a leak from the pattern of what left, who had access and where it surfaced.
Asset tracing and litigation support. Finding assets to enforce against, locating witnesses, establishing a pattern of life, and serving evasive respondents. Our guide on how investigators trace hidden assets sets out the lawful reach.
Technical surveillance countermeasures. Sweeping boardrooms and executive offices for listening devices before sensitive negotiations.

How an engagement runs

It begins with a scoping conversation, free and confidential, about what the business needs to know and what decision it will inform. From that comes a written scope and a fixed price. Where litigation is contemplated or the matter is sensitive, the instruction usually comes through the company's solicitors so that the work attracts legal privilege; we advise clients to consider this at the start, not the end.

The desk phase follows: registers, filings, litigation, property, sanctions, press and the wider digital footprint of the people and companies involved, run on our own in-house OSINT platform rather than a stack of subscriptions, with every query logged. Most due-diligence instructions are answered here. Where they are not, the work moves into the field: discreet enquiries, interviews conducted to a standard a tribunal accepts, surveillance where it is proportionate, and forensic support where devices or accounts are involved.

You receive a written report that separates what was established from what was inferred, cites each finding to its source, states confidence plainly and says what remains unknown, structured so that a board can read the first page and a lawyer can rely on the rest. Where the matter proceeds, our investigators support the disciplinary process, the litigation or the police report and can give evidence about how material was obtained.

The legal boundaries

Corporate investigation in the UK is governed by the general law, and a competent investigator treats the boundaries as part of the craft. Personal data is processed under UK GDPR on a documented lawful basis, usually a legitimate interest assessed against the individual's rights, and K3K Investigations Ltd is an ICO-registered data controller. Obtaining personal data by deception is an offence under the Data Protection Act 2018; accessing accounts or systems without authority is an offence under the Computer Misuse Act 1990; interception of communications is prohibited by the Investigatory Powers Act 2016. Competitor intelligence is lawful when it draws on open sources and unlawful when it involves pretexting or inducing breaches of confidence. Bribery Act 2010 due diligence, sanctions screening and the persons-with-significant-control register are routine components of counterparty work, and whistleblower protections shape how internal investigations are run.

An investigator who will not explain how a finding was obtained is a finding you cannot use. Every K3K report says how.

How a corporate investigator differs from a forensic accountant

The two work together on most large fraud matters. A forensic accountant analyses financial records the company already holds or obtains through disclosure, reconstructing what the numbers show. A corporate investigator establishes the facts around the numbers: who the counterparties really are, which directors sit behind which companies, where the assets went, what the individuals did and said, and what the public record reveals that the ledgers do not. On a procurement fraud the accountant proves the inflated invoices; the investigator proves the ghost supplier is the purchasing manager's brother-in-law.

What it costs

Corporate instructions are quoted as a fixed price per scope after a free consultation, so the board knows the cost before approving the work. As a guide, employment-grade background checks and verification products start from £750 per subject, executive due-diligence reports are quoted per subject on the depth required, surveillance is £500 to £1,200 per operative-day, and multi-jurisdiction due diligence and internal investigations are scoped and timetabled individually. Our corporate investigations page describes the service in full.

Frequently asked questions

What is the difference between a corporate investigator and a private investigator?

The disciplines are the same, surveillance, tracing, open-source research and evidence handling, pointed at commercial questions rather than personal ones: due diligence, internal fraud, IP theft, executive vetting and litigation support. Corporate work is more often instructed through solicitors and more often ends in a tribunal, a regulator or a courtroom.

Do I need a corporate investigator before a merger or a major contract?

If the counterparty's honesty, solvency or reputation would change the decision, and the data room cannot prove them, yes. Due diligence on the people and companies behind a deal is inexpensive relative to the deal and is the single most common instruction we take from businesses.

Can a corporate investigator access bank records or private emails?

No. Bank records and private communications are obtained only through the bank's own processes, a court order or the police. What an investigator establishes lawfully is who the people and companies are, what the public and company records show, what people did and said, and where assets can be found, which is usually what makes a disclosure application succeed.

Is a corporate investigation confidential and privileged?

Confidential always. Privileged where the instruction is structured properly, usually through the company's solicitors when litigation is contemplated. Raise this at the scoping call, because privilege is easier to establish at the start than to claim later.

How long does corporate due diligence take?

Desk-based due diligence on a UK counterparty or executive is typically delivered within days. Multi-jurisdiction work, internal investigations with interviews, and matters involving surveillance are scoped and timetabled at the outset.

Is it legal to investigate a competitor?

Yes, using open sources: filings, press, public statements, patents, planning applications, job adverts and the digital footprint of the business and its people. It is unlawful to obtain confidential information by deception, to induce employees to breach confidence, or to access systems without authority, and a reputable agency will refuse those methods.

A commercial question that needs an answer before you act? Speak to a senior investigator in confidence — free, no obligation, and scoped to the decision you actually face. Call 020 3343 7007 (24 hours) or book a call.