The request usually arrives in a single sentence: «can you run a background check on this company before we sign.» Behind that sentence is a real decision — a wire transfer, a distribution agreement, a hire, an investment — and a term being used loosely. Due diligence vs background check is not a question of vocabulary, or of how deep you go. The two are different instruments. They answer different questions, they sit under different legal frameworks, they are bought for different reasons, and they fail in different ways. Buying the wrong one is not a partial answer; it is a precise answer to a question you were not asking.
We see the consequence often enough to recognise it on sight: a clean screening report on a named individual, a signed agreement with an entity nobody examined, and a loss the report could never have predicted because it never looked in that direction. What follows is what each instrument actually is, what governs it, what it proves, where each one breaks, and how to decide in advance which of the two your situation requires — or whether it requires both.
Due Diligence vs Background Check: Two Different Questions
Start with the background check, because it is the more defined of the two. The background check meaning that matters commercially is a search of defined scope about a natural person: confirm identity, then check that person against criminal court records in named jurisdictions, sex offender registries, employment and education claims, professional licences, driving records, and — where the purpose permits it — credit history. The scope is agreed before the search runs. The output is a record of what each source returned.
What most buyers miss is that the moment a background check is procured from a third party and used to decide about employment, credit, insurance or tenancy, the whole transaction becomes regulated. An fcra background check is a consumer report under the Fair Credit Reporting Act, and the statute governs the conduct of everyone touching it. The user must have a permissible purpose. For employment screening, the applicant must receive a clear disclosure in a standalone document and give written authorization before the report is ordered. If the report contributes to an adverse decision, a pre-adverse action notice with a copy of the report and the statutory summary of rights must go out first, the person must have a genuine opportunity to dispute, and only then may the final adverse action notice follow. Reports built partly on personal interviews about character or reputation carry additional disclosure duties, and the reporting agency itself owes a duty of accuracy. Several states and cities add stricter rules on when criminal history may be requested and how it may be weighed, and federal anti-discrimination law constrains how records are used once you have them.
Due diligence is a different animal entirely. It is an open-scope investigation of a person or an entity, run to answer a business question: who is this counterparty, what do they actually control, what are they exposed to, and what in the file is not adding up. There is no fixed endpoint. The work stops when the question is answered, when the risk has been priced, or when the counterparty refuses to answer — which is itself a finding. There is no consumer-reporting framework behind it, because it is not a consumer report; a corporate investigation into an entity, its filings, its liens and its ownership chain is not the same legal object as a screening report about a job applicant.
Nor is due diligence generally imposed by rule. The federal Customer Due Diligence Rule at 31 CFR 1010.230 binds covered financial institutions — banks, brokers and dealers in securities, mutual funds, and futures commission merchants and introducing brokers — not ordinary operating businesses. For everyone else, the standard is set by your own risk assessment, your contracts and your bank’s expectations, which is exactly why what customer due diligence requires in practice is a commercial judgment rather than a compliance checkbox. One obligation does reach everybody: sanctions screening under OFAC applies to all U.S. persons and businesses on a strict-liability basis, and sits outside both frameworks.
What Each One Answers, and What Governs It
Set side by side, the difference between due diligence and background check stops being a matter of degree and becomes a matter of kind.
| Dimension | Background check | Due diligence |
|---|---|---|
| Question answered | Is this person who they claim to be, and what is on their record? | Who is this counterparty, what do they control, what are they exposed to, and what is not adding up? |
| Subject | A natural person | A person or an entity, and usually the structure connecting them |
| Scope | Defined in advance: agreed searches, agreed jurisdictions, agreed lookback period | Open: set by the question and the money at risk, extended whenever something fails to reconcile |
| Typical sources | Identity trace, county and state criminal indexes, registries, employment and education verification, licence boards, driving records, credit where permitted | Corporate filings and filing history, UCC liens, federal and state dockets, contracts, financial records, licensing, sanctions and adverse media, ownership evidence |
| Legal framework and consent | FCRA when procured from a consumer reporting agency for employment, credit, insurance or tenancy: permissible purpose, standalone disclosure, written authorization, adverse action steps, plus state and local rules | No consumer-reporting statute. The CDD Rule reaches covered financial institutions only; OFAC reaches everyone; otherwise your own risk standard and contract terms govern |
| Output | A report of records: matches, non-matches, verifications, with the search parameters attached | An analysis with a conclusion: what is established, what is not, what the residual risk is and what would resolve it |
| Right purchase when | The decision is about a person entering a position of trust | The decision is about money, an entity, or a continuing relationship |
The decision framework follows from the table, and in practice it is short. If you are hiring an employee or engaging a contractor into a position of trust, and the decision genuinely turns on the individual — their record, their credentials, their history of handling money or vulnerable people — you need a background check, run under the correct legal framework, with the consent and adverse action mechanics observed from the start. If you are signing with a company, wiring funds, onboarding a vendor, extending credit, investing, or if something simply feels wrong and you cannot articulate why, you need due diligence, because the question is about an entity and a set of relationships that no screening product examines.
And when the counterparty is effectively one individual — a single-member LLC, a sole practitioner, a founder who is the entire operation — you need both, sequenced correctly. Screening tells you about the person. Due diligence tells you what the person has built, borrowed and pledged, and whether the entity signing your contract is the one with the assets.
What the Official Guidance Does Not Tell You
There is no national criminal database available to private parties. The unified federal systems are restricted to law enforcement and to specifically authorized purposes. What the market sells as a «national background check» is an aggregation of county and state records purchased in bulk, with coverage that varies by state and by county, refresh cycles measured in weeks or months, and jurisdictions that supply nothing at all. It is a screening tool for deciding where to look, not a national record. The distinction between commercial aggregation and an official record is the same one that surfaces when people ask what a U.S. police certificate actually is and how it is obtained, and it catches out buyers and applicants equally.
The FBI Identity History Summary is a different instrument, and it is usually obtained by the subject, not by you. It is the fingerprint-based federal record and the only federal criminal history record an individual can obtain about themselves; commercial products are not that record, whatever they are called. Private employers generally cannot order it directly — access exists where a specific statute authorizes fingerprint-based checks for a given occupation, not as a matter of preference. In cross-border files it is frequently the document a foreign authority actually wants, and requesting a commercial report instead costs weeks.
Sealed and expunged records cut in both directions. Sealing and expungement are creatures of state law, and a record removed from a court index does not automatically disappear from a commercial database that copied it earlier. That is a live accuracy problem for whoever relies on the stale copy, and it is one of the reasons an aggregated report is not evidence of anything on its own. The mirror-image error is treating a silent index as proof of a clean history when the record was simply never digitised, was filed under a different name, or sits in a county nobody searched.
Identity matching is where quiet failures live. Most criminal court indexes are searchable by name and date of birth, not by Social Security number, so common names, hyphenated and married names, transliterated names, suffixes and middle-name variants produce both false hits and false clears. A false hit is visible and gets disputed. A false clear is invisible and gets relied upon. Confirming that a person is the person on the record often runs through civil status and identity documents, which is why what U.S. vital records can and cannot prove about an individual matters more than buyers expect: these are state and county records, and an attestation only speaks to the jurisdiction that issued it.
A background check on an individual tells you nothing about the entity that signed. This is where the money is actually lost. The person you screened may be entirely clean and still be the wrong counterparty, because the contract is with a company you never examined: its formation history, its liens, its litigation, its authority to sign, and above all its ownership. That last question has no federal answer. FinCEN’s beneficial ownership database was never public, and the final rule issued on 11 August 2026 made permanent the exemption of U.S. companies and U.S. persons from reporting and directs FinCEN to delete information it reasonably believes relates to U.S. persons. Foreign reporting companies must still report their foreign individual beneficial owners, but for a U.S. counterparty there is no registry to consult — ownership has to be established from state filings, corporate documents and contracts, which is the substance of verifying a U.S. company before you do business with it.
A clean result rarely states what was actually searched. Instant online reports sell speed and deliver stale aggregation; the summary page says «no records found» and the parameters that produced it — which counties, which years, which name variants, which sources returned nothing versus returned nothing because they were not queried — are either buried or absent. A report you cannot interrogate is a report you cannot defend, to a bank, to a board or in court.
The Most Common Mistakes and What They Cost
The failures we are brought in to repair are consistent, and each carries a predictable price.
- Screening the individual and never verifying the entity they signed for. The founder came back clean; the contracting party was a two-month-old LLC with a virtual address, no assets and a blanket lien over everything it did own. The cost is a judgment nobody can collect.
- Running an employment-purpose check without the required authorization and adverse action steps. Ordering a consumer report without standalone disclosure and written consent, or declining a candidate on the strength of a report without the pre-adverse notice, the copy of the report and a real chance to dispute, converts a routine hire into a claim — and the claim survives even when the underlying record was accurate.
- Repurposing a regulated report. A consumer report obtained for one permissible purpose is not a general-purpose dossier to be reused for vendor vetting, a partnership decision or curiosity about a competitor. Using an FCRA-regulated report outside its permitted purpose creates exposure that has nothing to do with what the report said.
- Treating a clean commercial report as proof. An aggregated database result is a lead-generation tool. Where a decision matters, findings are confirmed at the source jurisdiction, and the absence of a finding is qualified by what was searched and what was not.
- Never asking the ownership question until after the loss. It is remarkable how often nobody, on either side, ever asked who ultimately owns and controls the counterparty — and how often that answer, once obtained, would have stopped the transaction.
The costs compound in a specific way. Sanctions liability is strict, so a clean SDN name match on the entity means little where ownership is unknown: the 50 Percent Rule blocks entities owned 50 percent or more, directly or indirectly, in the aggregate, by blocked persons, even when the entity appears on no list. Money spent on the wrong instrument is spent twice, because a screening report cannot be upgraded into an entity investigation — the work restarts. And when a bank, an insurer or a court later asks what was verified and on what basis, «we ran a background check» is not an answer to a question about a company.
How Compliance Officers Resolves It for You
The first thing we do is refuse to sell you the wrong product. Before any search runs, we establish what the decision actually turns on — a person, an entity, or both — which determines the instrument, the legal framework and the consent that has to be in place. That conversation takes minutes and routinely changes the scope of the file.
- Person-level screening under the correct framework: identity confirmation before any record search, jurisdiction-level criminal record work rather than a database summary, employment, education and licence verification, and the disclosure, authorization and adverse action mechanics observed where the purpose requires them.
- Entity-level due diligence: corporate existence and full filing history in the state of formation, foreign qualification where the business actually operates, UCC liens searched under the correct debtor name in the correct jurisdiction, federal and state dockets, licensing, and reconciliation of the trading name against the entity that will sign and be paid.
- Ownership and control established, not assumed, from filings, corporate documents and direct confirmation — the question no federal registry answers.
- Sanctions and adverse media applied properly, with the 50 Percent Rule in mind rather than as a name match, and with hits resolved instead of forwarded to you as raw noise.
- Cross-border coordination, including the fingerprint-based federal record and any legalisation a foreign authority will require, requested at the start so statutory timelines run in parallel rather than in sequence.
You receive one document, in English, written so a credit committee, a bank or a court can follow it: every finding attributed to the record it came from, every search parameter stated, every gap named as a gap rather than smoothed over. Where the evidence supports a conclusion, we state it. Where it does not, we say so and tell you exactly what would resolve it.
We run these files continuously, across state records, court dockets, licensing bodies and federal channels, which is why we already know which office answers which question and where a search will quietly betray you. Everything is handled remotely, wherever you and the counterparty sit. Zero paperwork for you, zero errors, zero unnecessary delays. If a signature, a wire or a hire is waiting on this, contact us to evaluate your case.
Frequently Asked Questions
In one sentence, what is the difference between due diligence and a background check?
A background check is a defined-scope search about a person against identity, criminal, employment and credential records, and when used for employment or credit decisions it is regulated as a consumer report. Due diligence is an open-scope investigation of a person or an entity to answer a business question, with no fixed endpoint and no consumer-reporting statute behind it. We scope whichever one your decision actually requires.
Do I need the person's written permission to run a background check?
If the report comes from a consumer reporting agency and is used for employment, credit, insurance or tenancy purposes, yes: a permissible purpose, a standalone written disclosure and the subject’s written authorization are required before the report is ordered, and adverse action steps apply if it influences a negative decision. State and local rules add further limits. We set the file up correctly at the outset, before anything is searched.
Is there a single national criminal database, and what is the FBI Identity History Summary?
There is no national criminal database open to private parties. Commercial «national» products aggregate county and state records with uneven coverage and lag. The FBI Identity History Summary is the fingerprint-based federal record and the only federal criminal history record an individual can obtain about themselves; private employers cannot generally order it without specific statutory authority. We handle both routes and tell you which one your situation calls for.
Can I run a background check on a company?
Not in the screening sense — companies do not have criminal records or credentials to verify. What you can run is a corporate investigation: formation and filing history, liens, litigation, licensing, sanctions exposure and, critically, ownership and control. There is no federal registry of who owns a U.S. company, so that has to be established from state records and documents. That assembly is exactly the work we deliver.
How long does each one take, and can it all be done remotely?
Yes, remotely, wherever the parties are located. Person-level screening in defined jurisdictions is generally quick; entity work extends when several states are involved, when the filing history includes name changes or reinstatements, or when court records need real review. Fingerprint-based federal records and any legalisation for foreign use carry timelines outside anyone’s control. We tell you at the start which element sets the schedule.
What does it cost, and how do I avoid paying twice?
Cost follows scope: how many jurisdictions, whether the subject is a person or an entity, whether ownership has to be traced, and whether federal or foreign-facing records are needed. Government fees vary by office. Paying twice almost always comes from buying the wrong instrument first, so the scoping conversation is where the money is saved. Contact us to evaluate your case and we will define the scope your decision requires.
Do you need to know whether your situation calls for a background check, due diligence, or both?
Compliance Officers runs the verification end to end: zero paperwork for you, zero errors, zero unnecessary delays.
Phone and WhatsApp: +1 305 647 3000
