How to Vet a Business Partner Without Overstepping Legal Lines

There's a version of "checking someone out" that crosses a line — and it's more common than people think. Covert surveillance, accessing someone's device or accounts without authorisation, misrepresenting who you are to get information out of someone (known as pretexting) — all of this sits outside the law, regardless of how good the underlying intention is.

The good news is that none of it is necessary. A properly conducted due diligence check relies entirely on information that's already public or lawfully accessible: company registries, court records, sanctions and watchlists, media coverage, and a person or company's own public digital footprint.

The distinction matters for two reasons. First, obviously, because staying within the law isn't optional. Second — and this is the part people often miss — because information gathered unlawfully generally can't be used anywhere that matters. It won't stand up with a solicitor, a bank, or the police. It won't hold up if challenged. An evidence-grade report, built entirely from lawful sources with a clear trail showing where every finding came from, is the version that actually protects you if a decision is ever questioned later.

If you're vetting a business partner and something you're being offered sounds like it required stepping outside a legal boundary to obtain, that's worth pausing on — not because it's aggressive, but because it likely isn't usable, and it exposes you to risk you didn't need to take on.