B&PBulca & PartnersDiligence & Integrity
Overview / How we work

Method you can put in front of a regulator.

Nothing enters a file without a source we can name and a date we can prove. Where a record is closed or contradictory, we say so rather than fill the gap.

The engagement

Four steps, and you know where the file stands at each one.

Step 01 · Scoping

Scope the question

Which decision the check supports, how deep it needs to go, which jurisdictions are in play, and what output you need. NDA signed, fee and timeline agreed.

Step 02 · Collection

Collect from source

Registries, courts, regulators, licensed databases and local-language media, archived as retrieved so every claim can be traced back later.

Step 03 · Assessment

Assess and review

One analyst writes, a second reviews. Genuine concerns separated from name collisions, and confidence stated finding by finding.

Step 04 · Delivery

Deliver and stand behind it

In the format you asked for, with a call to walk through it. Follow-up questions, and later audit questions, are included.

Sources

Where the findings come from.

We name our source classes openly, and will share the specific source list for your jurisdiction before you commission any work.

Primary registriesCompany registers, land and asset registries, licensing bodies, free-zone authorities
Courts & regulatorsCivil and criminal dockets, insolvency filings, arbitration records, enforcement notices
Licensed databasesSanctions, PEP and watchlist data under commercial licence, refreshed at source
Media & archivesNational and trade press, print archives and local-language outlets not indexed in English
Human enquiryDiscreet, lawful enquiries through vetted local correspondents, disclosed in the scope note
Confidence gradingConfirmed, probable or unverified, stated per finding, never blended into one score
Quality control

The checks we run on ourselves.

01

Two pairs of eyes

Author and reviewer are always different people. The reviewer's initials are in the file.

02

Source archiving

Every document captured as retrieved and dated, so a finding can be re-checked years later.

03

Conflict check

Run before acceptance. If we cannot act independently, we decline and tell you why.

04

Post-delivery support

Questions from your committee, auditor or regulator answered by the original analyst.

Confidentiality & data

Your enquiry is as sensitive as its subject.

Engagements are handled on a need-to-know basis. We never disclose who we are researching for, and we do not resell what we gather.

NDA before scoping

Mutual non-disclosure signed before we discuss a subject or a jurisdiction.

Data minimisation

We ask only for the identifiers a check actually needs.

PDPL & GDPR-aligned handling

Lawful basis, subject rights and cross-border transfer covered in the engagement terms.

Encrypted delivery

Files released through an encrypted channel to named recipients only.

Named access only

The assigned analyst and reviewer see the file. No shared inboxes, no pooled offshore teams.

Retention on your terms

Working papers held for an agreed audit period, then destroyed on schedule, or returned.

Where we draw the line

What we will not do.

No pretexting or intrusion

No false identities, no access to data we are not entitled to, no surveillance. If a record cannot be obtained lawfully, it is not in the file.

No conclusion without evidence

Allegations are reported as allegations, with source and status. We do not convert rumour into a finding to make a report look decisive.

No legal advice

We establish facts and frame risk. Whether to onboard, decline or file remains your decision, taken with your own counsel.