A lawyer files a forty-page due diligence report as an annex to a claim. The judge turns to page twelve and asks a single question: where did this come from, and when. The report is continuous prose with no sources behind it. At that moment half the analyst work stops existing. This is how to build a file so that question never lands, and what a Ukrainian court and an international tribunal each expect before they will look at it.
The difference between a report for a client and a report for a proceeding is not length, and it is certainly not layout. It is whether every statement can be traced back to a source, a moment in time, and an unbroken path from the original to the page in front of the judge. That path is called chain of custody. Without it, even accurate information is easy for opposing counsel to cut away with one line: that is somebody's opinion, not evidence.
This matters more than it used to, and for a specific reason. Until a few years ago most due diligence on Ukrainian counterparties was commercial: a buyer wanted to understand who he was dealing with, not to sue anybody. Since 2022 the mix has shifted towards sanctions exposure, enforcement against designated persons, disputed acquisitions and banking compliance. In those files the report is not the end of the work. It is the first exhibit.
The timestamp. A register showed one beneficial owner yesterday and a different one today. Without a capture date, the sentence "this person owned the company" invites the obvious reply: as of when. A date in a standard machine-readable form, such as 2026-08-09, sitting beside the finding rather than buried in a methodology annex, is the minimum.
The source address. The precise page, the record identifier, the query that produced the result, or the permanent link to an archived copy. The test is simple: can opposing counsel follow it and see what the analyst saw. Where the source sits behind a paid or restricted door, that fact belongs in a note explaining how the result can be reproduced.
The hash and the saved copy. A register page looks different a month later, and links die. So the analyst saves a copy at the moment of capture, computes a SHA-256 hash of that file, and records the value in a log. If authenticity is challenged, comparing the hash to the stored file answers the challenge in two minutes rather than two hearings.
The signature. Not "retrieved in June" but a named analyst, a role, a precise time with a time zone, and the method used. The signature attaches responsibility to a person who can later explain the work. For material heading towards a proceeding, that signature is often a qualified electronic signature with legal effect under the European eIDAS framework.
Not every finding needs the same treatment, and pretending otherwise is how due diligence budgets get burned. Background context can travel at a low level. A conclusion the whole claim rests on cannot. The scale runs from weakest to strongest.
| Level | What it is | How it is treated |
|---|---|---|
| 01 · Bare screenshot | An image with no source address and no capture time. | Client briefing only. A court will normally refuse it. |
| 02 · Sourced capture | Screenshot plus source address plus date and time of capture. | The working standard. Generally accepted as written evidence, but open to a challenge on authenticity. |
| 03 · Hashed copy | Level 02 plus a preserved file, a SHA-256 hash and a log entry. | Legal-grade. The hash closes off the authenticity argument. |
| 04 · Certified extract | A notarised copy, or an official extract issued and signed by the register administrator. | The strongest form of documentary evidence. Reserved for findings the case turns on. |
| 05 · Expert opinion | A signed opinion setting out qualifications, method and reasoning, which connects separate facts into a conclusion. | A distinct procedural instrument in its own right, and the form arbitration expects. |
The flexibility is the point. In a mid-sized file, the findings a lawyer actually intends to cite usually number somewhere between eight and fifteen. Certifying those is proportionate. Notarising all two hundred sources adds weeks and a large bill for no gain, because the remaining material is analytical context and belongs at levels 02 and 03.
Three procedural codes govern the question, depending on the forum: the Commercial Procedure Code for business disputes (Articles 91 to 96), the Civil Procedure Code (Articles 95 to 102) and the Code of Administrative Procedure (Articles 94 to 101). All three recognise as written evidence any document containing information about the circumstances of the case, and treat electronic captures and extracts as a subspecies of written evidence. So the question is never whether a court accepts a PDF in principle. It is whether that particular PDF satisfies admissibility and reliability.
An expert opinion is a separate instrument again, with its own procedural footing (Article 101 of the Commercial Procedure Code, Article 106 of the Civil Procedure Code). In criminal matters a due diligence report is usually not evidence at all but a roadmap for the investigator, showing where the documents, accounts and connected persons are; the admissible material then comes from official responses obtained through procedure, although a report carrying full chain of custody can be attached as a written source of information under Article 99 of the Criminal Procedure Code.
What each class of source takes to become usable differs sharply, and this is where foreign counsel are most often caught out.
| Source | Standing | What it takes |
|---|---|---|
| Ukrainian state registers | Strong | Corporate, property, procurement, court-decision and enforcement records. Generally accepted with a source address and capture date. If authenticity is disputed, the court can obtain an official extract from the administrator. |
| Foreign corporate registers | Conditional | Being public does not make a foreign document admissible. For material points, obtain an official extract, and add an apostille or consular legalisation unless a treaty removes the requirement. |
| Offshore-leak databases | Orientation | Not standalone evidence. Use them to identify the jurisdiction, then pull the official extract from that country register and file that instead. |
| Satellite imagery, vessel tracking | Expert only | An image or a track means nothing on its own. It needs an expert opinion covering coordinates, capture date, the signal source and the processing method. |
| Sanctions and designation lists | Strong | Official publications of OFAC, the EU, the UN, UK OFSI and Ukraine's national security council register. Cite the listing entry and the date it was checked. |
Anyone relying on pre-2022 assumptions about Ukrainian data will build a file with holes in it. Most public registers were closed to open access on 24 February 2022 for wartime security reasons, and they have reopened unevenly since.
The most important reversal came on 19 January 2026, when the Unified State Register returned to open data, and its public dump again includes ownership structure and beneficial-owner information. That restores the core of any corporate check. Property data moved the other way: a Cabinet resolution effective from 27 December 2025 removed the exact address and cadastral number from electronic extracts on real estate held by legal entities, leaving only the region. The restriction is on the electronic output, not on the data. A paper extract obtained through a registrar, or access exercised by an enforcement officer or an attorney, still returns the full record. Vehicle records remain closed to a third party searching another owner. Ukraine also has no official register of politically exposed persons, so that screening layer rests on public and community sources rather than a state list.
The practical consequence for a file is a documentation habit, not a workaround: state which channel produced each record, and on what date, because the same register can lawfully return different levels of detail through different channels. A report that does not say which door it came through invites a question it cannot answer.
Arbitration is formally more relaxed and substantively more demanding. The IBA Rules on the Taking of Evidence in International Arbitration, in the 2020 revision, are the reference point most tribunals either adopt outright or use as guidance, and the institutional rules of the LCIA, the ICC and the SCC all leave the tribunal wide discretion over the admissibility, relevance, materiality and weight of evidence. In practice that means far less ceremony around apostilles and certified copies, and far higher expectations of method.
A due diligence report reaching a tribunal is read as expert evidence. The panel wants to know who prepared it, on what sources, by what method, and how the author gets from those sources to the conclusion. The vehicle for that is an Expert Declaration: a signed statement confirming independence from the parties, setting out qualifications, listing the instructions received, describing the sources and method, and affirming that the opinions expressed are the author's own. The report becomes an annex to the declaration rather than a free-standing document.
Two consequences follow. First, document production in arbitration is adversarial and structured, commonly through a schedule in which each side states its requests and objections; anything you relied on can be asked for. Second, the author will be cross-examined. Every gap in the chain of custody is a question waiting to be put in front of the tribunal, and a witness who cannot say where a figure came from damages the rest of the report along with it. This is the practical argument for building at level 03 or above from day one: retrofitting provenance after a dispute starts is slower, more expensive, and visibly reconstructed.
A file built for a proceeding has four physical components, and they are worth stating plainly because most reports have only the first.
The dossier itself, in a stable archival PDF format, with each finding carrying a cross-reference to its log entry. A separate folder holding every source file exactly as captured. A log — a spreadsheet is enough — with one row per finding: statement, source address, capture time, hash of the saved file, and the analyst identifier. And an archive hash covering the whole package, quoted in the covering letter, so that in three years anyone can prove the bundle was not edited after delivery. For matters where the stakes justify it, a trusted timestamp adds independent proof of the capture date.
One more component is contractual rather than technical. An engagement letter setting out scope, method and limits, together with a conflict check, answers the independence questions opposing counsel raises first. It is also where responsibility is allocated: the analyst is answerable for the integrity of collection and the accuracy of citation, and the lawyer is answerable for the legal position built on top.
Plenty of this is within reach without help. Capture pages with the address and time visible, save the file rather than the image alone, keep a simple log, and do it at the moment you find something rather than a week later. That habit alone lifts most material from level 01 to level 02, which is the difference between an anecdote and an exhibit.
The work changes when the file is going somewhere adversarial. Our Evidence Package exists for exactly that: full-page captures with time and source, a SHA-256 hash for every file, an independent web-archive copy where one is available, official register extracts with request timestamps, and cross-verification of each key fact against a second source. It starts at $300 for up to ten findings within one to three business days, $500 for up to twenty-five with cross-verification, and $800 for up to fifty with extended provenance and full chain-of-custody documentation aligned in advance with your lawyer. Where the underlying counterparty check is itself being prepared for a dispute, the Legal-Grade report from $1200 builds the evidence log into the check from the first day rather than reconstructing it afterwards.
Law firms usually want something narrower: the fact layer, under their own brand, with the client relationship untouched. That is the white-label arrangement — a $349 pilot on a single matter, or a retainer from $899 a month for firms running a steady flow. The output arrives ready to be stripped of our marks and issued as the firm's own work product, with the conflict check and the data firewall documented.
Evidentiary strength is reproducibility, not polish. The other side must be able to follow your references and see what you saw, at the moment you saw it. A fact without that path is text, not evidence. Ukrainian practice lets most of a file sit comfortably at levels 02 and 03, with certification reserved for the findings the claim rests on. International arbitration will forgive you the apostille and forgive you nothing on method. And the cheapest moment to decide which standard applies is before the collection starts, not after a commercial disagreement has quietly turned into a dispute.
Related reading: asset tracing in Ukraine, where the same documentation standard decides whether a located asset can actually be secured.
The Evidence Package fixes each finding with a full-page capture, source address, UTC time and SHA-256 hash, plus register extracts and cross-verification — from $300, in 1–3 business days.