Coldstorm Get in touch →
Services / 03

Open-Source Intelligence

Open-source attribution across corporate structures, beneficial ownership, digital footprints, and adverse-media signal. Court-ready chain of custody. Delivered to instructing counsel only.

Start Urgent Intake Agent Protocol
Overview

What this service covers.

OSINT (Open-Source Intelligence) is structured intelligence work that uses only publicly accessible information. When done to professional standards, it produces results that are evidentially defensible, reproducible, and suitable for civil procedure. Done without discipline, it produces adverse-media summaries that collapse at cross-examination. Coldstorm's OSINT work sits firmly in the first category.

Counsel typically instruct OSINT for: attribution of anonymous or pseudonymous counterparties, digital-footprint mapping of a named subject, corporate-structure reconstruction where registry-only evidence is insufficient, and adverse-media triage for EDD mandates. The common thread is reproducibility: every retrieval is logged, hashed, and timestamped during collection, not after.

Our methodology prioritises Tier-1 open sources (court records, regulated filings, official registries, academic and peer-reviewed material) and suppresses Tier-3 unverified sources that cannot survive cross-examination. A structured OSINT report typically contains under 10 percent of the sources initially reviewed — the rest are excluded at quality gates before they ever reach the report.

Audience

Who this is for.

Litigation counsel

Attribution of counterparties, pseudonyms, or behind-the-scenes actors in a matter.

Financial institutions' compliance teams

Structured open-source signal feeding EDD reviews and suspicious-activity escalation.

Private equity and M&A counsel

Pre-close adverse-media and counterparty reputational analysis.

Family offices

Subject or counterparty profile before engagement. Digital-footprint review for UHNW principals.

Regulators and enforcement bodies

Structured OSINT supporting referral packages where depth is required.

Counsel advising on insurance claims

Attribution and adverse-media work for high-value claims with coverage disputes.

Process

How an engagement unfolds.

  1. 01
    Scoping

    Subject, objective, jurisdictional scope, delivery deadline confirmed. Permissible-source boundaries defined in advance. Privilege posture clarified.

  2. 02
    Source enumeration

    Identification of every source category relevant to the engagement. Tier-1 registries and court records, Tier-2 commercial datasets, Tier-3 structured open-web retrieval. Each category mapped to a retrieval plan.

  3. 03
    Structured retrieval

    Each source queried with a logged query, retrieval method, and timestamp. Content archived (WARC or HTML snapshot) and cryptographically hashed. No Tier-3 content enters the working set without a Tier-1 or Tier-2 corroboration.

  4. 04
    Attribution synthesis

    Findings cross-referenced and weighted by source tier. Attribution claims anchored in Tier-1 data. Uncertainty explicitly disclosed where tier coverage is thin.

  5. 05
    Delivery

    Report with executive summary, attribution map, source-by-source ledger, and chain-of-custody appendix. Delivered to instructing counsel only.

Scope

Typical engagement shape.

Matter typeScope profileTiming
Named-subject profile3 jurisdictions5–7 business days
Pseudonym attributionAnonymous counterparty7–14 business days (variable)
Corporate structure OSINTMulti-entity subject10–14 business days
Adverse-media triageEDD supporting document3–5 business days

Every engagement is quoted after a confidential scoping call. Fees reflect matter complexity, jurisdictions in scope, and delivery timeline. Engagements instructed by counsel are treated as privileged work product and delivered to the retaining party only.

FAQ

Frequently asked.

Is OSINT admissible in court?

Structured OSINT with documented chain of custody is routinely admitted as evidence in civil proceedings in England, Switzerland, and New York. Admissibility depends on how the evidence was collected, preserved, and presented, not on whether it was open-source. Our process is built to that standard.

Do you use paid investigative databases?

Yes, where they qualify as Tier-1 or Tier-2 sources. We do not rely on aggregator summaries as primary sources. Every commercial-dataset finding is traced back to its underlying primary-source filing where possible.

What is the difference between OSINT and adverse-media screening?

Adverse-media screening is a narrow slice of OSINT focused on reputational and criminal-allegation signal. OSINT encompasses structural attribution, digital-footprint analysis, corporate reconstruction, and forensic open-source work that goes well beyond media screening.

Can findings be used across jurisdictions?

Yes. Our retrieval and chain-of-custody documentation are built to satisfy English, Swiss, and New York civil procedure by default. Adaptations for Canadian, EU, Singapore, or UAE procedure are provided on instruction.

How do you handle contested attribution?

Attribution claims that cannot be anchored in Tier-1 or Tier-2 sources are flagged as low-confidence in the report. We do not issue strong attribution opinions on Tier-3-only evidence. Counsel receive the full picture with explicit confidence bands.

Related reading

From the Insights blog.

Engage the Team

Start a confidential intake.

Urgent matters receive a scoped response within twelve business hours. Longer engagements begin with a paid scoping consultation under privilege where counsel instructs.

Start Urgent Intake