Who controls the company and what can a shareholder enforce — these are the two questions that drive every cross-border verification. Official registers answer the first question partially and the second question not at all. The gap between what is filed and what is enforceable is where most acquisition errors originate.
Control is not always visible at the first layer. A director named in a commercial register may hold no economic interest. A shareholder listed with a 25 % stake may act on instructions from a person whose name appears nowhere in any public filing. Establishing who actually controls the company requires reading across at least three source layers simultaneously.
What the sources showNamed directors, registered shareholders, and — where the jurisdiction mandates disclosure — the person recorded as beneficial owner. Depth varies by jurisdiction and register. What the sources do not showUndisclosed nominee arrangements, oral shareholder agreements, and economic interests held through unregistered instruments. No register confirms the absence of these. Condition of accessAccess rules differ by jurisdiction: some registers are open without registration; others require a national identifier, a declaration of legitimate interest, or a licensed intermediary. Mechanisms are described below without fees, which vary and must be verified at the point of request. Ceiling of knowledgeThe ceiling of what the sources allow is stated before payment. Where a chain cannot be completed from public sources, that limit is named explicitly.Director and beneficial owner: the three source layers
Every cross-border verification of a principal operates across three layers. Each layer has a different disclosure standard, a different access condition, and a different evidentiary weight.
Layer 1 — Commercial register. This is the foundational layer. It records the legal entity, its registered directors, and — in most civil law jurisdictions — the list of shareholders with their nominal holdings. It does not record who instructed those shareholders or directors. The register is a snapshot of what was filed, not a live picture of control.
Layer 2 — Beneficial ownership register. Following the EU's Fourth and Fifth Anti-Money Laundering Directives, member states established registers of ultimate beneficial owners (UBOs). The Court of Justice of the European Union, in its November 2022 ruling in joined cases C-37/20 and C-601/21, held that unrestricted public access to UBO registers is incompatible with the Charter of Fundamental Rights. As a result, public access across EU member states is now restricted by default. Access requires demonstrating a legitimate interest or holding a specific professional status. The depth of what each national register discloses — and the threshold at which a person qualifies as a beneficial owner — differs by jurisdiction.
Layer 3 — Filed financial statements and annual returns. Where a jurisdiction mandates filing of accounts, those documents may reveal related-party transactions, group structures, and intercompany loans that are invisible in the shareholder list. This layer is the most variable: filing thresholds, formats, and public availability differ sharply across the 35 jurisdictions covered.
Reading across all three layers simultaneously is the minimum standard for a principal verification. A single-layer search produces a result that is technically accurate and substantively incomplete.
What the beneficial ownership register discloses — and what it does not
The beneficial ownership register records the person who, at the time of filing, met the jurisdiction's threshold for disclosure. That threshold is typically 25 % of shares or voting rights, or the right to appoint or remove a majority of directors. A person who controls the company through a chain of entities each holding below that threshold may not appear in the register at all.
The register records a declaration. It does not verify the declaration. The filing obligation rests on the company; the accuracy of what is filed depends on the company's compliance. Where the filing is outdated or incorrect, the register reflects the error, not the reality.
In jurisdictions outside the EU, the picture is more varied. Some jurisdictions — including the United Kingdom — maintain a register of persons with significant control (PSC) that is publicly searchable without registration. Others have no beneficial ownership register at all. Several jurisdictions in the coverage area record beneficial owners only in the context of financial institution onboarding, with no public-facing register.
The table below maps the disclosure standard across the three source layers for the principal object type.
| Source layer | What is disclosed | Access condition | Evidentiary limit |
|---|---|---|---|
| Commercial register | Legal directors, registered shareholders, nominal holdings | Varies: open to restricted | Does not record economic control or nominee status |
| Beneficial ownership register | Person meeting the jurisdiction's UBO threshold at time of filing | Legitimate interest required in most EU jurisdictions | Declaration only; accuracy not verified by registrar |
| Filed accounts and annual returns | Group structure, related-party transactions, intercompany positions | Varies: open to restricted | Filing thresholds exclude many private companies |
| Court and enforcement records | Judgments, insolvency proceedings, enforcement actions | Varies by jurisdiction and court level | Negative result does not confirm absence of proceedings |
Where the chain breaks: the limit of what the sources allow
The ceiling of what the sources allow is stated before payment. This section names the structural limits that no source combination can overcome.
Nominee arrangements. A nominee shareholder holds shares on behalf of another person under a private agreement. That agreement is not filed in any public register. The commercial register shows the nominee as the shareholder. The beneficial ownership register may or may not show the underlying principal, depending on whether the nominee arrangement was declared and whether the threshold was met. Where the nominee holds below the disclosure threshold, the underlying principal is not visible in any public source.
Chains through non-disclosing jurisdictions. A company incorporated in a jurisdiction with no beneficial ownership register — or with a register that is not accessible to foreign requesters — breaks the chain. The analysis can establish the chain up to that entity and name the point at which it stops. It cannot establish what lies beyond it.
Outdated filings. Registers record what was filed. Where a change of control occurred after the last filing and before the next mandatory update, the register reflects the previous position. The gap between a transaction and its registration varies by jurisdiction from days to months.
Oral and undocumented arrangements. Shareholder agreements that are not filed, voting trusts, and powers of attorney that are not registered do not appear in any source layer. Their existence can sometimes be inferred from patterns in filed documents, but they cannot be confirmed from public sources.
What this means for the verification. A completed principal verification names the person or entity recorded at each layer, the date of each filing, the access condition applied, and the point at which the chain cannot be extended further. It does not assert that no further layer exists. It asserts that no further layer is visible from the sources accessed.
Cross-border verification: the 35-jurisdiction coverage
The principal object type is verified across 35 jurisdictions. The coverage spans EU member states, EEA countries, the United Kingdom, and selected non-EU jurisdictions relevant to cross-border corporate structures.
Across that coverage, three structural patterns recur.
Pattern 1 — Full disclosure jurisdictions. A small number of jurisdictions maintain commercial registers and beneficial ownership registers that are both publicly accessible and reliably updated. In these jurisdictions, the three-layer read produces a result with a high degree of completeness. The United Kingdom is the clearest example: Companies House publishes directors, shareholders, and PSC data without registration, under an open government licence.
Pattern 2 — Restricted disclosure jurisdictions. The majority of EU member states fall here after the 2022 CJEU ruling. The commercial register is accessible; the beneficial ownership register requires a demonstrated legitimate interest. Access is possible but requires a compliant request process, including the correct national identifier for the target entity and, in some jurisdictions, a formal declaration or a licensed intermediary.
Pattern 3 — Partial or no disclosure jurisdictions. Several jurisdictions in the coverage area either have no beneficial ownership register or maintain one that is not accessible to foreign requesters without local legal representation. In these jurisdictions, the analysis relies on the commercial register and filed accounts only. The limit is named explicitly in the output.
The access condition for each jurisdiction is established before the verification begins. Where access requires a national identifier, a declaration, or a licensed intermediary, that requirement is part of the path — not an obstacle discovered after the request is submitted.
Where the sources disagree
Discrepancies between source layers are themselves a result. They are reported as findings, not filtered out.
The most common discrepancy pattern in principal verifications is a mismatch between the shareholder list in the commercial register and the person recorded in the beneficial ownership register. This can arise from several causes: the UBO threshold was not met by the registered shareholder; the filing was made at different points in time; or the declaration in the beneficial ownership register is incorrect.
A second pattern is a mismatch between the directors named in the commercial register and the signatories on filed accounts or annual returns. Where a person signs accounts but is not registered as a director, that discrepancy is noted and the source of the signature is identified where possible.
A third pattern arises in group structures: the shareholder recorded in the commercial register is a holding company whose own ownership structure is registered in a different jurisdiction. The analysis follows the chain into that jurisdiction and applies the access conditions applicable there. Where the chain leads to a non-disclosing jurisdiction, the point of termination is named.
FAQ
What is the difference between a director and a beneficial owner? A director is a person formally appointed to manage the company and recorded in the commercial register. A beneficial owner is the natural person who ultimately owns or controls the company, whether or not that person holds any formal appointment. The two roles may be held by the same person or by entirely different people. The commercial register shows the director; the beneficial ownership register — where it exists and is accessible — shows the beneficial owner. Neither register shows informal control arrangements.
Does a negative result in the beneficial ownership register mean the company has no beneficial owner? No. A negative result means that no person meeting the jurisdiction's disclosure threshold was recorded at the time of the last filing. It does not confirm the absence of a beneficial owner. It may reflect a nominee structure below the threshold, an outdated filing, or a non-compliant declaration.
Can a cross-border verification establish the beneficial owner of a company incorporated in a jurisdiction with no public register? The commercial register and filed accounts remain accessible in most such jurisdictions. Where those sources do not disclose the beneficial owner, the analysis names the point at which the chain terminates and the reason. No verification can produce information that no source contains.
What does 'legitimate interest' mean in practice for accessing EU beneficial ownership registers? The requirement varies by member state. In most jurisdictions, a person conducting due diligence in connection with a transaction, a legal proceeding, or a regulatory obligation qualifies. The request must typically identify the target entity by its national identifier, state the purpose of the request, and — in some jurisdictions — be submitted through a licensed intermediary or via a national portal that requires registration. The access path is established before the request is submitted.
How current is the information in the registers? Registers record what was filed. The currency of the information depends on the filing frequency required by the jurisdiction and the compliance of the company. In most EU jurisdictions, changes to directors and shareholders must be filed within a defined period after the change occurs. Beneficial ownership registers have separate update obligations. Where the last filing date is known, it is reported alongside the data.
Sources
- Companies House (United Kingdom) — https://find-and-update.company-information.service.gov.uk — extracted 2026-10-01
- Court of Justice of the European Union, judgment of 22 November 2022, joined cases C-37/20 and C-601/21 — https://curia.europa.eu — extracted 2026-10-01
- European Business Register network — https://www.ebr.org — extracted 2026-10-01
- GLEIF Global LEI Foundation — https://www.gleif.org — extracted 2026-10-01
Request this report
Disclaimer: This report is a factual compilation from official registers and public sources. It is provided for informational purposes only, does not constitute legal advice, and contains no legal qualification of the facts established. VLO Law Firm assumes no liability for actions taken or not taken based on this material. For advice regarding your particular situation, please contact info@vlolawfirm.com.
Author: Katharina Berg — Partner, Central Europe, VLO Law Firm
