Counterparty decision · Counterparty & Relationship Check
Which relationship is evidenced, inferred or unresolved?
The buyer’s decision
Buyer: CISOs, cyber insurers, technology procurement and incident counsel. Decision trigger: Reported breach, third-party incident, vendor assurance claim.
Defined unit: Named entity and up to five related organisations or responsible entities identified from lawful records.
Research emphasis: Correlate vendor notices, regulatory disclosures and independent chronology without system access.. Records prioritised include regulator breach notice, issuer 8-K, vendor incident statement.
Exactly what is investigated
- Confirm exact subject, legal identity and the limited research period
- Recover the agreed original records and record publication, effective and collection dates
- Which dated original regulator breach notice most directly proves the key assertion concerning counterparty & relationship check?
- Could unproven attribution alter the proposed decision, and which record would disprove it?
- Test adverse or alternative evidence and distinguish absence of evidence from a negative finding
- Construct a traceable statement delta log for this decision
- Record the specific unavailable evidence and clarify what would change the conclusion
Deliverable and quality control
- Evidence-supported relationship diagram, mismatches, ownership questions and exposure caveats.
- statement delta log using traceable sources
- Dated and classified findings: supported, contradicted, unresolved or out of scope
- Human review of source-to-claim traceability and privacy considerations
- Concisely stated reliance limitations and decision-owner questions
Boundary, cost and acceptance
Commercial rule: Fixed scope and fixed fee agreed in writing, with human acceptance before work begins. A fee amount is not yet approved for publication. No automatic checkout, blanket monitoring commitment, performance guarantee or prepaid credits.
- No intrusion, hacking, private forensics or unauthorized scanning.
- Unlimited records, new jurisdictions, third-party licensed datasets and urgent handling unless contracted
- Final legal, accounting, medical, security, engineering, valuation or regulated sign-off
For a faster decision, commission the narrowest product that can resolve the immediate evidence question. Larger dossiers are optional and should follow a documented need.
Evidence starting points and what they do not prove
These databases and materials are starting points only. We do not claim that a named buyer, project, company or occurrence has been verified on this page.
- NIST AI risk management framework Official or industry source for use if relevant, not evidence of a named case
- Kroll investigations & diligence services Official or industry source for use if relevant, not evidence of a named case
Defined evidence, not an unlimited research engagement
Decision-specific checks
- What publicly reported incident facts are corroborated and material?
- Independent contrary-source check and named source version/date
- Explicit not-observed / outside-mandate decision
What to provide
- Exact subject identifier and jurisdiction
- Decision date, quoted claim or document
- Permitted supporting evidence and known contrary claims
Illustrative delivery components
Supported-link diagram and unresolved identities and a source index stating record ID, issuer, effective date, read date and unresolved matters.
Professional reliance limit
No intrusion, hacking, private forensics or unauthorized scanning.
Illustrative specification only. No factual conclusion or cleared buyer has been represented. Written scope, fee and researcher acceptance are required.
Evidence before commitment · clearly bounded
A specific answer for a specific decision
Which subcontractors or components are evidentially linked to exposure?
What the review checks
- Record the precise named subject, stable identifier, period and claim being tested.
- Recover or request relevant original sec 8-k incident disclosures and filed amendments and distinguish the original issuer from a vendor-generated summary.
- Test the adverse possibility that vendor certificate overstated as guarantee of security.
- State what cannot be established, rather than quietly converting a failed search into an exculpatory finding.
- Obtain independent human source traceability review and identify the client professional responsible for final reliance.
What you supply
- Named company or matter, relevant legal entity identifiers, jurisdiction and decision date.
- Up to the stated cap of quoted claims and original client-held documents available lawfully.
- Known alternatives, exculpatory evidence and material contrary accounts.
- Written approval of bounded deliverable, reuse/reliance limits, any paid-source costs and a human reviewer.
A human-reviewed source and contradiction assessment. No general AI answer is accepted as independent evidence. Scope, actual source availability, exclusions, fixed fee and delivery date are agreed in writing before work begins.
Download illustrative PDF: Related-entity testThis specimen describes the method and possible deliverables. It is not a completed client investigation and contains no case findings.