ESG Verification Without Consultants: An OSINT Approach for Impact Investors

By Wingston Sharon | February 2025

ESG consulting has a dirty secret: a significant portion of what gets billed as "independent verification" is actually repackaging what organizations self-report, wrapped in a credible-looking framework. A consultant reads the company's sustainability report, maps it to GRI or SASB standards, and produces a gap analysis. The underlying data is still whatever the company told them.

This doesn't mean ESG consulting is worthless — auditors who visit facilities, interview staff, and review primary documents provide genuine value. But that level of verification is expensive, and for impact investors doing early-stage due diligence, there is significant ground-work that can be done before engaging a consultant, or instead of one for smaller ticket sizes.

Open-source intelligence (OSINT) techniques let you triangulate what organizations publicly claim against what their regulatory footprint, financial disclosures, news coverage, and corporate registry history actually show. This is time-consuming and requires judgment. It's also substantially cheaper than a consulting engagement, and in my experience often surfaces the most important questions.

The Core Methodology: Claim → Evidence → Discrepancy

Every OSINT ESG investigation follows the same structure:

1. Start with the claim — identify the specific ESG claim you want to verify
2. Find the evidence trail — locate primary sources that should corroborate or contradict it
3. Look for discrepancies — inconsistencies between claims and evidence are where the interesting questions live

The claim might be: "Our operations are carbon neutral as of 2022." The evidence trail includes: carbon registry entries, offset purchase records, energy supplier contracts, planning permissions for the relevant facilities, and any regulatory environmental submissions. Discrepancies might include: no entries in the relevant carbon registry, offset purchases that don't match the claimed volume, or a facility expansion in 2022 that wasn't mentioned in the emissions trajectory.

You are not proving fraud. You are building a list of questions that deserve specific, documented answers before you invest. That is a meaningfully different goal, and it shapes how you approach the research.

The Sources

Corporate registries:

Every EU member state maintains a public commercial register. UK Companies House is notable for the depth of its filings (annual accounts, confirmation statements, officer histories). The OpenCorporates database aggregates registry data from 140+ jurisdictions and allows free searches by company name.

What to look for:
- Incorporation date and shareholder history (rapid ownership changes before an impact investment raise can indicate restructuring for optics)
- Annual accounts — even at a summary level, revenue and staff headcount should roughly align with ESG claims about scale of operations
- Officers and directors — cross-reference named executives against other companies they direct; conflicts of interest and related-party structures often appear here
- Company dissolving and reforming under a similar name (sometimes done to shed historic liabilities)

EU-specific databases:

• EU Emission Trading System (ETS) registry — publicly searchable at the EU Transaction Log (EUTL). Companies covered by EU ETS (energy-intensive industries above certain thresholds) have their verified emissions and allowances publicly recorded. If a company claims significant emissions reductions and is covered by ETS, the registry should show it.
• CORDIS — EU-funded research and innovation projects. If a company claims to be conducting R&D in sustainability, check whether they have any EU-funded projects and what those projects actually report.
• Subsidy databases — EU state aid register (DG COMP) and national subsidy databases. Companies that claim independence from fossil fuel subsidies while receiving state support for conventional energy activities will show up here.
• Orbis (Bureau van Dijk) — not free, but widely available through university libraries. Comprehensive financial data and ownership structures for European companies.

Environmental permits and planning permissions:

This is the most underused source in ESG due diligence. In most EU jurisdictions, environmental impact assessments and planning permissions for significant facilities are public record. What they reveal:

• Actual scope of operations at specific sites (vs. what the company describes in its ESG narrative)
• Historical compliance or non-compliance with environmental conditions
• Facility expansions that may not have appeared in emissions disclosures
• Operating permits with specific emissions limits — compare against company's reported emissions

Access varies by jurisdiction. In the UK, planning applications are searchable via local council portals. In Germany, immission control permits (BImSchG) are in principle public but require requests to state environmental agencies (Landesumweltämter). The Netherlands has a relatively open environmental permit database via omgevingsloket.nl.

News archives and court records:

Systematic news archive searches via Google News (with date filters), LexisNexis (if you have access), or Factiva. Search for the company name alongside terms like: environmental, pollution, fine, penalty, violation, spill, protest, complaint, workers, labor.

EU court records vary in accessibility. The European Court of Human Rights (ECHR) database is searchable. Many EU national courts have online portals for public decisions. For UK companies, Companies Court decisions are available via The Gazette (thegazette.co.uk) for insolvency and related proceedings.

LinkedIn and professional networks:

LinkedIn is a surprisingly useful OSINT source for verification of headcount and operational claims. If a company claims 500 employees but LinkedIn shows 45 staff with profiles and none of them have job titles consistent with the described operations, that is a discrepancy worth investigating. This is imperfect (not everyone has LinkedIn, some industries have lower coverage), but it is a useful cross-check.

Specific OSINT Techniques

Verify workforce size claims:

ESG reports sometimes claim headcount as an indicator of community impact ("we employ 2,000 people locally"). Cross-check against:
- Annual accounts filed with the national registry (many jurisdictions require employee count in financial statements)
- LinkedIn company page follower count and staff with listed employer
- Job posting history via LinkedIn or Indeed (a 500-person company with no open roles for two years is unusual)

Verify Scope 3 emissions calculations:

Scope 3 (supply chain) emissions are the most gameable part of carbon accounting because they depend entirely on what data the company collects from suppliers. Suspicious signals:

• Scope 3 figures that are suspiciously round numbers (e.g., exactly 10,000 tCO2e) suggesting estimation rather than measurement
• Scope 3 figures that are lower than Scope 1+2 for a company whose business model involves significant physical product supply chains — this is almost always wrong
• Year-over-year Scope 3 reductions that don't correspond to known changes in supply chain sourcing, volumes, or supplier mix

Verify certifications and third-party endorsements:

ESG reports frequently reference certifications: B Corp, ISO 14001, Fairtrade, Rainforest Alliance, FSC. Every legitimate certifier has a public directory. Check that:
- The certification is listed in the certifier's database
- The certification scope covers what the company claims (e.g., an ISO 14001 certification for one facility being presented as if it covers all operations)
- The certification is current (not expired or lapsed)

B Corp's public directory is at bcorporation.net. ISO certifications can be verified through national accreditation bodies. These checks take five minutes and catch a surprising number of overstatements.

Corporate structure and related parties:

Offshore holding companies, complex ownership chains, and related-party transactions can reveal structures that undermine ESG claims. If a company claims to have no fossil fuel revenue while a subsidiary or related party has active hydrocarbon extraction licenses, that is material.

OpenCorporates and Orbis are useful here. The ICIJ Offshore Leaks Database (covering Panama Papers, FinCEN Files, and others) is searchable for company and individual names. Note that presence in the database does not indicate wrongdoing — offshore structures are legal in many contexts — but it prompts questions about ultimate ownership and tax structure that may be relevant to ESG claims.

Red Flags That Justify Deeper Investigation

Running dozens of ESG due diligence investigations, these are the patterns that most reliably indicate a gap between claims and reality:

1. ESG report dates much earlier than the reporting period — an ESG report published in 2024 describing 2021 data should raise questions about why current data isn't available.

2. Third-party certifiers that aren't accredited — a certification from an organization you can't independently verify is a certification of nothing. Always check the certifier's own accreditation status.

3. Emissions calculations with suspiciously round numbers — measurement doesn't produce round numbers. Estimation does. Round numbers invite a follow-up question about methodology.

4. Employee ESG champions without corresponding evidence — many ESG reports feature passionate quotes from employees about the company's mission. This is PR writing. The meaningful question is what the operational practices actually are at the facility level.

5. Supply chain claims without supplier contracts or audit evidence — "we require all suppliers to meet our code of conduct" is a policy, not a verified fact. What is the audit mechanism? Who performs it? How many suppliers were audited last year?

6. Carbon neutral claims without offset registry entries — if a company claims to have offset emissions, those offsets should be registered and retired in a recognized registry (Gold Standard, Verra VCS, or similar). Look for the retirement certificate or registry entry.

Honest Assessment of What This Can and Cannot Do

OSINT-based ESG verification is a first-pass filter, not a full audit. It is particularly good at:

• Identifying obvious discrepancies and overstatements quickly
• Generating specific, well-grounded questions for management before you invest
• Deciding whether the claims warrant the cost of full professional verification
• Catching certifications that are expired, misrepresented in scope, or fabricated

It is not a substitute for:

• Physical facility inspection
• Staff interviews (beyond LinkedIn)
• Review of internal management accounts and board minutes
• Supply chain audit programs

For investments above a materiality threshold where ESG claims are central to the thesis, OSINT should precede but not replace professional verification. The OSINT work means that when you do engage a consultant, you're bringing specific, well-formed questions rather than asking them to tell you where the problems are.

What We're Building at Agentosaurus

We're building automated pipelines that run versions of this methodology at scale — crawling corporate registries, cross-referencing emissions databases, flagging discrepancies between what organizations publish and what regulatory filings show. The methodology works manually, but manual research on a portfolio of 50 organizations isn't practical.

The automated version won't replace judgment. But it can surface the right questions faster.

If you want to discuss ESG verification methodology for a specific investment or portfolio, reach out at hello@agentosaurus.com.