EU Business Registers (BRIS): Intelligence Source Guide

BRIS is the legal interconnection of the EU and EEA national company registers, surfaced publicly through the Find a Company search on the European e-Justice Portal. It is the only free route that returns an official EU company identifier and a link to the register of record.

At a glance

Source	EU Business Registers (BRIS)
Category	Corporate, Ownership & Legal Records › Corporate Registries
Homepage	https://e-justice.europa.eu/
Machine interface	https://e-justice.europa.eu/content_find_a_company-489-en.do
Format	HTML
Access	Open — no account required
Disciplines	Corporate Intelligence
Mission domains	Financial Crime

EU interconnected business registers. — as catalogued in the platform’s own source registry.

The Business Registers Interconnection System is not a database. It is a federation. Each EU member state, plus the EEA EFTA states, keeps its own central, commercial or companies register under its own national law, and BRIS is the machinery that lets one query reach all of them and return a harmonised minimum set of fields. The public face of that machinery is the Find a Company search on the European e-Justice Portal, operated by the European Commission. You type a company name or a registration number, choose a country or search across all participating states, and the portal dispatches the query to the national registers and renders what comes back. What comes back is deliberately thin: the company name, the national registration number, the European Unique Identifier, the legal form, the registered office, the member state and register that holds the record, and a link out to that register. Behind the public search there is a second function that most analysts never see – a machine-to-machine notification layer between registers, so that when a company opens a branch in another member state, or takes part in a cross-border merger, the register in the other country is told. The legal basis is EU company law: Directive 2012/17/EU created the obligation, and it is now consolidated into Directive (EU) 2017/1132 on certain aspects of company law, with technical specifications set out in Commission implementing regulations that have been amended and replaced more than once.

Every commercial aggregator and every open dataset of European companies is a copy. BRIS is the index to the originals, and that distinction is the whole analytical job it does. When you need to know that a company exists as a matter of law, in which register, under which number, and in which member state, an aggregator gives you a plausible answer and BRIS gives you a citable one. The European Unique Identifier is the specific instrument here: a structured identifier that names the country, the register and the company number in one string, designed precisely so that a company appearing in a Greek register and the same company mentioned in a Belgian filing can be tied together without guessing. For CORPINT work on cross-border structures, and for the financial-crime domain generally, the practical use is verification rather than discovery. You find the entity somewhere else – in a leak, a contract, a partner report, a customer file, a sanctions listing – and you come here to establish whether it is a real registered legal person, what its official form is, and which national authority is custodian of the underlying documents you will need to order. Used the other way round, as a discovery tool, BRIS disappoints badly, because it will not search by director, by address, by shareholder or by anything except company name and number.

Who publishes it, and why that matters

The system is run by the European Commission in partnership with the member state registers, funded from the EU budget, with no commercial model and no advertising. That has good and bad consequences and you should plan for both. The good: there is no incentive to withhold, upsell or degrade the free tier, the legal mandate is durable, and the underlying obligation on member states to connect their registers is not going away. The bad: development moves at the pace of an intergovernmental IT programme, the e-Justice Portal has been redesigned more than once and deep links have broken across those redesigns, and there is no published commitment to availability, latency or a stable machine interface for the public. The registers themselves are national bodies with wildly different resourcing, from well-funded digital agencies to underfunded court registries, and BRIS inherits all of that variance. Treat the Commission portal as a stable long-term entry point and treat any specific URL, form layout or field ordering as something that may change without notice. If a workflow of yours depends on the portal responding in a particular shape, it will break, and the failure will often be silent – the search simply returns nothing rather than erroring.

Provenance is the first question to ask of any dataset and the one most often skipped. Who collects it, what their incentive is, whether they publish a methodology, and whether they correct the record when they get something wrong all bear directly on how much weight a finding drawn from it can carry.

What a record actually contains

The fields you will be working with, what each one means, and whether it is something you can pivot on. Read the meanings carefully — more analysis is wrecked by misreading a field than by failing to find one, and a field that looks like an observation is often an inference.

Field	Type	What it means	Pivot value
euid	string	The European Unique Identifier. A structured string combining the country code, an identifier for the specific register, and the company number as that register holds it. This is the only genuinely pan-European company identifier with a legal basis behind it.	Deterministic join key across EU filings, branch and cross-border merger records, and any dataset that has adopted EUID. Decompose it to recover the register and the national number.
company_name	string	The registered legal name, returned in the language and script of the register of record. It is not translated, not transliterated and not normalised, so a Greek company comes back in Greek and a Bulgarian one in Cyrillic.	Name searches in national registers, gazettes and procurement data – but only after you have handled script and the legal-form suffix.
registration_number	string	The company number in the national register. Formats differ completely between member states, and several states have changed their own format over time, leaving superseded numbers circulating in older documents.	The national register itself, national tax and VAT identifiers where they derive from it, court records and insolvency proceedings.
legal_form	string	The national legal form, expressed in national terms – GmbH, SARL, BV, Oy, sp. z o.o. and so on. The portal may show an English gloss, but the operative value is the national one and glosses across states are not equivalences.	Determines which national filing obligations apply and therefore which documents should exist at the register and can be demanded when they do not.
registered_office	string	The address on the register. This is the address for legal service, which is very frequently a formation agent, an accountant or a virtual office, and only sometimes a place where the business actually operates.	Address clustering to find other companies at the same address – but treat a shared address as a lead about the service provider, not about the companies.
member_state	enum	The state whose register holds the record. In a federation this is the routing key: it tells you whose law governs the entity and whose authority you approach for documents or assistance.	National register terms, national company law, document ordering process, and the relevant mutual legal assistance channel.
register_name	string	Which register within the member state holds the entry. Several states have more than one competent register, or regional registers, and the EUID encodes which one.	The correct national access point for ordering certified copies and filed documents.
register_link	string	The outbound link to the national register entry. This is the field that makes BRIS useful, because everything of substance lives on the other side of it.	The national record: filings, accounts, officers, charges, history – whatever that particular state chooses to publish.
status	string	Where the register supplies it, an indication of whether the company is active, dissolved, in liquidation or struck off. Coverage of this field is uneven and the vocabulary is national, not harmonised.	Insolvency registers, official gazette notices, and the separate insolvency registers interconnection where the state participates.
branch_data	array	Where present, records of branches the company has opened in other member states. This is one of the specific things the interconnection was built to make visible across borders.	The register in the host state; branch filings often name a local representative who is not a director of the parent.
registration_date	timestamp	Date of entry in the register where the state returns it. Not universally present, and in some registers it reflects a later re-registration or a system migration rather than original formation.	Timeline construction, and comparison against incorporation dates asserted in other datasets where a mismatch is itself informative.
scope_filter	enum	Implicit rather than displayed: only company types within the scope of the EU company law directive are in BRIS at all. Everything you see has passed that filter, and everything filtered out is invisible without being marked as absent.	National registers directly, for partnerships, sole traders, associations, foundations and cooperatives that fall outside the directive's annexes.

Coverage — and what is not in it

Geographically, the EU member states plus the EEA EFTA states – Iceland, Liechtenstein and Norway – and nothing else. The United Kingdom left the system with Brexit, which matters enormously because UK entities appear in very large numbers in European corporate structures and must now be looked up separately at Companies House. Entity-wise, coverage is limited to the company types listed in the annexes to the EU company law directive, which in practice means limited liability and public limited companies. Partnerships, sole traders, cooperatives in several states, associations, foundations, trusts and most non-corporate vehicles are outside scope and simply do not appear. Temporally, BRIS is a live query against live registers, so what you see is as current as the national register is – which ranges from same-day to weeks behind depending on the state and the type of change. There is no historical dimension at all: BRIS shows you the register as it stands now, not as it stood in 2016, and it holds no archive of superseded values. The update rhythm is therefore not a property of BRIS but of nearly thirty separate national systems, and if you need to characterise it you must characterise each register individually rather than making a statement about the federation.

Known blind spots

Absence of evidence here is not evidence of absence. These are the conditions under which EU Business Registers (BRIS) will not show you something that is nevertheless real:

• There is no beneficial ownership in BRIS at all. Beneficial ownership registers are a separate legal instrument under the anti-money-laundering framework with their own interconnection project, and following the Court of Justice judgment in the joined Luxembourg cases of November 2022 the provision giving the general public access to those registers was declared invalid, after which several member states restricted or closed public access. Do not conclude from a BRIS search that ownership is simply unavailable – conclude that you must go looking for it by a different and much harder route.
• No director or officer search exists. You cannot ask BRIS which companies a named person controls, in any member state or across them, and that is the single most common thing an investigator actually wants from a company register. Where the capability exists at all it lives in individual national registers and in aggregators that have scraped them.
• No financial statements, no charges or security interests, no shareholder lists and no filing history come through the interconnection. Those documents exist at the national register, frequently behind a fee, and BRIS only tells you where to go and ask.
• Search is by company name and number only, and matching behaviour differs by register. Some states return partial matches generously, some require near-exact strings, and some fail on diacritics or on whether a legal-form suffix is present – so a null result frequently means your string did not match rather than that the company does not exist.
• There is no bulk download, no documented public API and no dataset to ingest. Everything about BRIS is designed around an interactive human search, which makes it structurally unsuitable for screening at volume or for building a corpus.
• Dormant, dissolved and historically registered companies are handled inconsistently. Some registers keep struck-off entities searchable indefinitely, others remove them after a statutory period, so a company that certainly existed in 2014 may be entirely absent today with no marker distinguishing that from never having existed.
• Cross-border groups are invisible as groups. BRIS shows entities, and branches where they have been notified, but it does not model parent and subsidiary relationships, so a structure spanning five member states appears as five unconnected records unless you already know they are connected.
• The registered office is a legal address, not evidence of physical presence. In several member states a very large share of registered companies sit at a small number of formation-agent addresses, so address-based clustering produces enormous false clusters unless you first identify and exclude those addresses.
• Register content reflects what was filed, not what is true. Most European registers are filing-based rather than verification-based, so a name, an address or a director entry is a declaration by the company checked for form rather than for truth, and the register carries that declaration until somebody amends it.

Write the blind spot into the product. A statement that something “was not observed in EU Business Registers (BRIS)” is defensible; a statement that it “did not happen” is not, and the difference is what survives cross-examination.

Access, licensing and what you may do with it

Access model: Open — no account required

Access is free, immediate and anonymous. Go to the European e-Justice Portal, choose the Find a Company search, select a country or search across all participating states, and enter a name or a registration number. No account, no key, no fee. The interface is available in the EU official languages, but that affects the labels rather than the data – results come back in the language and script of whichever register holds them. The one practical trap is that the portal has been reorganised more than once and older deep links have not always survived, so navigate from the portal homepage or the business registers topic page rather than from a bookmarked query URL. Certified extracts and underlying documents are not part of BRIS: for those you follow the outbound link to the national register and transact there, under that register's own terms, which may require an account, a national electronic identity, a fee, or in a few cases a written request. Budget for that step being slow where the register is a court registry rather than a digital agency, and start it early in an investigation rather than at the reporting stage.

Licence

This is genuinely layered and you should not assume a single answer. The Commission publishes a legal notice and reuse policy covering material on the e-Justice Portal, but the substantive content returned by a BRIS search originates in a national register, and national registers set their own reuse terms – which range from open data with an explicit licence to strict prohibitions on systematic extraction and commercial reuse. Some member states charge for reuse of register data as a matter of national law. The safe operating assumption is that a single lookup for an investigation is unproblematic everywhere, that quoting the identifiers and the fact of registration in a report is unproblematic, and that bulk extraction, redistribution or building a commercial derived product is a question that must be answered register by register in writing. If a downstream product of yours depends on redistributing this data, obtain the position from each national register you rely on rather than inferring it from the portal's terms.

Rate limits and fair use

There is no published quota because there is no public API. The interactive search is dispatched to live national registers, several of which are modest systems that were never built for machine traffic, and automated querying at any volume is both technically fragile and likely to conflict with portal terms. If you need throughput, the correct answer is not to hammer BRIS – it is to use the national register that actually holds the data, several of which publish proper open APIs and bulk files, or to use an aggregator that has already done that work and then verify by hand the specific findings that matter. Treat BRIS as a verification instrument used tens or hundreds of times in an investigation, not thousands, and design your pipeline so that a human decision precedes every query rather than a loop.

Licensing changes, and it changes without warning. A dataset that was free for research this year may not be free for commercial or evidential use next year. Confirm the current terms before you build a dependency on it, and record the terms you relied on alongside the data — the licence in force at the time of collection is part of the provenance.

Collecting it

How EU Business Registers (BRIS) is actually pulled, in the order you would set it up. Prefer the bulk or export interface over per-item lookups wherever one exists: it is kinder to the publisher, faster for you, and gives a reproducible snapshot rather than a series of point-in-time answers you cannot reconstruct later.

Method	Format	Cadence	Notes
Interactive portal search	HTML	on demand; results are live against the national register	The primary and effectively only route. Search by name for discovery within a state, by registration number for verification. Capture the result as a timestamped PDF or screenshot, because there is no way to re-derive what the register said on a given day.
EUID capture and decomposition	CSV	once per entity, re-verified at case milestones	Record the EUID, the national number and the register identifier as three separate fields rather than one blob. Downstream matching depends on being able to use whichever form the other dataset speaks.
National register follow-through	HTML|JSON|bulk	varies by state, from real-time APIs to periodic bulk files	Where a state publishes a proper interface, collect from it directly and use BRIS only to confirm you are looking at the right register. Officers, accounts and filing history all come from here, not from the interconnection.
Document ordering	bulk	per request	Certified extracts, articles of association and filed accounts are ordered at the national register, sometimes for a fee and sometimes only with a national electronic identity. This is the step that produces court-usable evidence rather than a screenshot.
Branch and cross-border merger traces	HTML	event-driven	Worth checking deliberately, because these are the only relationships the interconnection carries. A branch notification in another member state is a structural fact you will not find by searching entities one at a time.

Ingesting it into the platform

Every step below is idempotent and cursor-based: interrupt one and it resumes from where it stopped rather than duplicating rows or losing progress. Collection is recorded per source, so a feed that quietly stops publishing shows up as a stale timestamp instead of silently thinning your coverage.

1. Register the source as attended — Add BRIS in sources.php marked as a manual, human-in-the-loop source with no automated collection. Recording that honestly stops a later analyst from reading the absence of records as evidence that the search was run and returned nothing.
2. Make EUID the canonical company key — In ingest.php, store the EUID as the primary external identifier for EU and EEA companies, with the national registration number and register identifier held as separate attributes rather than parsed on demand. Everything downstream joins better on a structured identifier than on a name.
3. Preserve the retrieval evidence — Attach the captured result page, the exact query string used and the retrieval timestamp to the record. A register lookup is a point-in-time observation of a mutable system and loses most of its evidential value without the time at which it was made.
4. Resolve to an organisation profile — Push the entity into org-profile.php so that registration facts sit alongside whatever else the platform holds about the same organisation – infrastructure, sanctions status, litigation, procurement awards, adverse media.
5. Screen against sanctions and PEP data — Run the resolved name and identifiers through sanctions.php. A registration record is the input to a screening decision, not the end of one, and the EUID gives you a cleaner key for that screening than a name string does.
6. Correlate with aggregator records — Use correlate.php to compare the BRIS result with what OpenCorporates and other aggregated sources hold for the same company. Divergence between the register of record and an aggregated copy is a dated-data signal worth capturing, not an error to reconcile away silently.
7. Flag agent and shared addresses — Before any address-based clustering, mark registered offices that recur across large numbers of unrelated companies as agent addresses. Doing this at ingest prevents an analyst three weeks later from building a network diagram out of a company formation service.
8. Attach to the case with the gaps stated — Add the record to cases.php together with an explicit note of what BRIS did not provide – no beneficial ownership, no officers, no accounts – so the case file records the unanswered questions rather than implying they were checked and came back empty.

Registered sources and their last-collected state are listed in sources.php, and the scheduled chain that keeps them current is in automation.php.

How it is wrong, and how to tell

Every dataset is wrong in characteristic ways. Knowing which ways is the difference between using a source and being used by one, and it is the part of source evaluation most often skipped because it is the part that takes work.

Judge BRIS on provenance rather than richness and it scores very highly. Every value comes from the register that holds the legal record, arrives without an intermediary transformation step, and is returned live rather than from a cache, so the classic aggregator failure – a company dissolved eighteen months ago still showing as active – does not occur here. That is a real and unusual guarantee. What authoritative does not mean is verified. The great majority of European company registers operate on a filing model: the company declares its name, address and officers, the registry checks that the form is complete and the fee is paid, and the declaration is entered. Registers do not generally investigate whether a declared director exists, whether an address is real, or whether a shareholder is a nominee, and several well-documented European fraud patterns depend precisely on that. So the correct reading of a BRIS record is that this is what has been declared to the competent authority and stands on the register as of now – a precise and useful statement, and a much weaker one than this is true. The second quality axis is completeness of the harmonised field set, which is poor and uneven: several states return only the bare minimum, and the difference between an empty field and an absent one is not always distinguishable from the portal.

Characteristic false positives

• Name collisions across member states are routine and legally meaningless. The same trading name can be registered by entirely unrelated parties in six countries, and matching on name alone across the federation produces confident cross-border links that do not exist.
• Transliteration and diacritics break matching in both directions. A Greek, Bulgarian or Romanian company name rendered into Latin script in your other dataset will not match the register string, and a match that does succeed after aggressive normalisation may well have matched the wrong company.
• Legal-form suffixes are treated as part of the name by some registers and stripped by others, so the same entity matches or fails depending on whether you included the suffix – and a fuzzy matcher tuned to ignore suffixes will merge a GmbH with an identically named GmbH und Co KG, which is a different legal person with a different liability structure.
• Registered office addresses cluster massively on formation agents, and an analyst who treats a shared address as evidence of common control will generate a network of hundreds of unrelated companies that share only an accountant.
• Status vocabulary is national and not comparable. Struck off, dissolved, in liquidation, cancelled and deregistered mean materially different things under different company laws, and flattening them into a single active or inactive flag destroys exactly the distinction that determines whether there is still a legal person to sue.
• A branch is not a subsidiary. Branch records surfaced through the interconnection describe an establishment of the same legal person in another state; reading them as a group structure invents corporate separation that does not exist, or misses liability that does.
• Absence of a result is ambiguous by construction. It can mean the company does not exist, that it existed and was removed under a national retention rule, that its type is outside the directive's scope, that your string did not match the register's matching rules, or that the national register was unavailable when the query was federated. The portal does not reliably distinguish these five cases.
• Registration dates can reflect a system migration rather than formation. Several registers have been rebuilt, and entities carried across sometimes acquired a new entry date, which makes a company look years younger than it is and can invert a timeline that a case turns on.

None of these make the source unusable. They make it a source that requires corroboration before an assertion built on it goes into a product, which is true of every source and admitted by few.

Ageing

The record you retrieve does not age, because it is live – but your copy of it does, and quickly. Company data changes for ordinary commercial reasons all the time: registered offices move, names change, directors resign, companies enter liquidation. A registration extract captured six months ago is a historical document and should be labelled as one in your case file, with the capture date beside it, not treated as the current position. The identifiers age much more slowly: a national registration number and its EUID normally persist for the life of the entity, which is exactly why you should anchor on them rather than on the name. A stale BRIS record looks entirely healthy – correct format, plausible values, no error markers – and the only way to detect it is to re-query. Build re-verification into case milestones: before any report goes out, before any filing, before any enforcement step, re-run the lookup and record the new timestamp. The other thing that ages is the portal itself, and the specific navigation path by which you reached a result may not work next quarter.

What this source feeds

A source is only worth what it lets you conclude. These are the disciplines that collect through it, the mission domains it serves and the data points it yields — every one is a tag, so you can follow any thread from here into the rest of the library.

Collected by these intelligence disciplines

• Corporate Intelligence

Serves these mission domains

• Financial Crime

Yields these data points

• Company / Organization

How each sector uses EU Business Registers (BRIS)

The same dataset is worked very differently depending on who you are, what authority you hold, and what you are ultimately producing. A military analyst is supporting a commander’s decision; a journalist is meeting a publication standard; an NGO caseworker is protecting a person. The records are shared — the constraints, thresholds and outputs are not.

🎖 Military and defence

Relevance here is procurement, logistics and supply-chain assurance rather than operations. Defence acquisition and force-protection work regularly needs to establish that a supplier, subcontractor, freight forwarder or facilities provider in a European jurisdiction is a real registered legal person of a specified form, and BRIS is the fastest authoritative way to do that without approaching the company. It is equally useful in export control and end-user verification, where a purported consignee in an EU state can be checked for registration, form and register of record before any further step is taken. The limitations bite immediately: BRIS will not tell you who owns the supplier, and ownership is precisely what matters when the concern is foreign control of a critical supplier or a front company inserted into a defence supply chain. Use it to establish the legal skeleton, then go to the national register, to the beneficial ownership route where your status gives you access, and to commercial ownership data for anything more.

🕵 National intelligence

For CORPINT and for financial-crime targeting, the discipline value of BRIS is that it converts an assertion into a cited fact. A company named in a leak, a contract, an intercept summary or a partner report becomes a registered legal person with an identifier, a member state and a custodian authority – and that identifier is what makes the entity joinable to sanctions data, procurement records, litigation and other national datasets without name-matching risk. It is also a coverage instrument in its own right: knowing which entity types are in scope tells you which structures deliberately sit outside it, and the vehicles that recur in sanctions-evasion work are disproportionately partnerships, foundations, trusts and non-EU entities that BRIS structurally cannot see. Treat a clean BRIS result as the opening of an entity workup and never as an ownership answer. The absence of any person-level search means this source contributes to entity resolution and almost nothing to network discovery.

👮 Law enforcement

The specific investigative value is evidential and procedural. A BRIS lookup identifies the register of record, which is the body from which you obtain a certified extract admissible in proceedings, and it does so without approaching the company or its agents. For cross-border cases it also answers the first routing question of any EU corporate matter – which member state's authority holds the documents you may need through mutual legal assistance or a European investigation order. Do not use the portal output as evidence itself; it is an unauthenticated web page reflecting a live query, and the certified document is what will survive challenge. Two further cautions: the search is not covert in the sense that matters if the national register logs and can disclose queries, and beneficial ownership is a separate instrument with separate access conditions that you may well qualify for as a competent authority even where the general public no longer does.

🔍 Private investigation and corporate security

For asset tracing, due diligence and pre-litigation work this is the free first stop that establishes whether a counterparty is what it claims to be, and it removes an entire category of expensive error – serving or suing the wrong legal person because two similarly named entities exist in different member states. The registered office it returns is the address for service, which is often the operationally useful fact even when it is plainly a formation agent. The commercial temptation is to substitute an aggregator because the interface is friendlier and the data richer; resist that for the specific facts that carry weight, because the aggregator's copy has a retrieval date attached and the register has the current position. Where a client engagement requires you to state that a company is active, write active on the register as at the date and time you checked, and keep the capture with the file.

📰 Journalism and OSINT media

Used well, BRIS makes corporate reporting defensible. A story that names a company should name the right company, and the EUID plus register link is how a reader, an editor or a lawyer can verify that independently – which is a meaningful part of pre-publication risk management on any piece alleging wrongdoing by a corporate entity. It is not a source of stories on its own, because it has no person search, no ownership and no financials, so discovery happens in leaks, aggregators, national registers and human sources, and BRIS confirms. Be precise in publication about what it does and does not establish: that a company is registered says nothing about whether it trades, who controls it, or whether the declared address is more than a mailbox, and readers will assume otherwise unless you tell them.

🌍 NGO, humanitarian and human rights

Corporate accountability, supply-chain and human-rights work uses BRIS to pin an alleged actor to a legal person in a specific jurisdiction, which is the prerequisite for every subsequent avenue – a national contact point complaint, a due-diligence law notification, a regulator referral or litigation. It is free, which matters for organisations that cannot buy commercial company data, and it is authoritative, which matters when a report will be contested by well-resourced lawyers. The structural warning is that the entities implicated in the hardest cases are frequently outside its scope – non-EU parents, partnerships, foundations, and companies in states that never joined – so the absence of an entity from BRIS must never be written up as the entity not existing. Pair it deliberately with beneficial ownership work, which is now a separate and more restricted route in most member states.

🎓 University and research

Researchers in corporate governance, economic geography, tax and law use BRIS mainly as a validation layer over larger datasets, because it cannot be collected at scale and was never designed to be. Its research interest in its own right is as a case study in regulatory interoperability: a legally mandated federation of national systems with a harmonised identifier, working partially and unevenly, whose gaps map neatly onto the political limits of company law harmonisation. Anyone building a European firm-level dataset should read the scope annexes of the company law directive carefully before making any claim about population coverage, because selection into the system is legal rather than random and biases samples heavily towards limited liability forms. Ethics review should account for the fact that register data includes named natural persons and remains personal data under EU law even though it is published by statute.

Playbook: working EU Business Registers (BRIS) end to end

A repeatable sequence from first pull to finished product. Each phase states what you are trying to establish, not merely what to click — the objective is a defensible chain of reasoning, not a completed checklist.

Phase 1 — Decide whether you need the register or a copy of it

Ask what the finding has to survive. If it must survive a lawyer, a regulator or a court, you need the register of record and eventually a certified extract, and BRIS is the routing layer to it. If you are exploring, screening at volume, or looking for people rather than companies, an aggregator will serve you far better and you should come back here only for the entities that end up mattering.

Phase 2 — Establish which member state you are actually in

Before searching, work out which jurisdiction the entity plausibly sits in, from the legal-form suffix, the address, the VAT number or the document that named it. Searching all countries at once is available but produces noise, and legal form is the strongest cheap signal – a BV is Dutch or Belgian, an Oy is Finnish, a sp. z o.o. is Polish.

Phase 3 — Search by number when you have one, by name only when you do not

Registration numbers are precise and names are not. If a document gives you a number, use it, and then confirm the returned name matches what you expected rather than assuming. If you only have a name, expect to run several variants: with and without the legal-form suffix, with and without diacritics, and in the original script.

Phase 4 — Capture the EUID and decompose it immediately

Record the EUID as returned, then split out the country, the register identifier and the national number as separate stored fields. This is the step that makes everything downstream joinable, and doing it later against a pile of captured screenshots is painful and error-prone.

Phase 5 — Follow through to the national register in the same sitting

The BRIS result is a signpost. Click through while you still have context and establish what that particular register publishes – officers, accounts, charges, filing history, shareholders – because this varies enormously and determines how much of your investigation can be done from open sources at all.

Phase 6 — Test whether the registered office is an agent address

Take the address and check how many other companies sit at it, using an aggregator or the national register's own address search where it has one. An address with hundreds of registrations tells you about a service provider and must be excluded from relationship inference; an address shared by three related companies is a genuine lead.

Phase 7 — Write down what is not here

For this entity, record explicitly that BRIS gave you no beneficial ownership, no shareholders, no directors unless the national register supplied them, and no financials. Naming the gaps converts them into tasks. The most common failure with this source is an analyst quietly treating a thin record as a complete one.

Phase 8 — Screen the entity before you invest in it

Run the name and identifiers against sanctions, PEP and adverse-media data before doing deeper work. A hit changes the legal and procedural posture of the entire enquiry, including what you may lawfully do next and whom you must notify, and discovering it at the end rather than the start wastes effort and sometimes creates exposure.

Phase 9 — Look deliberately for branch and merger traces

Where the entity has branches in other member states or has been party to a cross-border merger, the interconnection is the specific mechanism that makes that visible. These are the only structural relationships BRIS carries, so check for them explicitly rather than hoping they surface in a name search.

Phase 10 — Cross-check against a copy and treat divergence as signal

Compare what BRIS returned with what an aggregated dataset holds. Where they differ, the register is right about the present and the aggregator may be right about the past – which means the divergence often tells you approximately when something changed, and that date is frequently the analytically interesting fact rather than either value.

Phase 11 — Order documents where the finding carries weight

For anything that will be relied upon formally, obtain the certified extract or the filed documents from the national register through its own process and fee schedule. Plan for this taking days to weeks in states where the register sits inside a court, and start it early rather than at the reporting stage.

Phase 12 — Re-verify and date-stamp before you publish or file

Company data is mutable and your capture is a snapshot. Immediately before a report, filing or disclosure goes out, re-run the lookup, record the new timestamp, and write the finding in the form of what the register showed on a stated date. This one habit prevents the most avoidable category of corporate-intelligence error.

The platform ships this as a step-checked workflow in playbooks.php, so progress is recorded against a case rather than held in someone’s head.

What to pair it with

No single source carries a finding. These are the datasets that corroborate, extend or contradict this one — and a source that contradicts is worth more than one that agrees, because it is the only thing that will tell you when you are wrong.

Source	Relationship	What it adds
OpenCorporates	extends	Adds what BRIS structurally omits – officers, previous names, filing history where it has been scraped, and a person-level search – across a far wider set of jurisdictions, at the cost of being a dated copy rather than the register.
National business registers	prerequisite	The actual holders of the documents. BRIS only routes you to them, and everything of evidential substance – accounts, articles, charges, certified extracts – is obtained there under national terms.
GLEIF Legal Entity Identifier	corroborates	An independent global identifier for entities participating in financial markets, with its own verification process and published parent relationships, which is the closest thing open identifier data provides to a group structure.
OpenSanctions	extends	Screens the resolved entity against consolidated sanctions, PEP and watchlist data, turning a registration record into a compliance-relevant finding.
OpenOwnership	extends	Beneficial ownership data and standards work, covering the dimension BRIS does not touch and which became substantially harder to access in the EU after the 2022 Court of Justice judgment.
UK Companies House	extends	A necessary companion since Brexit removed UK entities from the interconnection, and unusually generous as registers go – free bulk data, a documented API, officers and charges included.
OCCRP Aleph	extends	Cross-references a registered entity against leaked and scraped document collections, which is where a legally clean company frequently acquires a very different profile.
Tenders Electronic Daily	corroborates	EU public procurement notices name winning economic operators, giving an independent record that a registered company actually trades and with whom.
EUR-Lex	prerequisite	The authoritative text of the company law directive and the implementing regulations that define what BRIS must contain, which is how you settle scope questions rather than guessing at them.

Legal, ethical and operational constraints

Company register data is public by legal design, but public does not mean unregulated. The records contain personal data – directors, representatives, sometimes shareholders and their addresses – and in the EU that data remains within scope of the General Data Protection Regulation even though it is published by statute. The Court of Justice addressed this directly in the Manni case, holding that there is no general right to have one's data erased from a company register given the legal certainty function that publicity serves, while leaving room for member states to restrict access in exceptional cases after a long period. Separately, and importantly for anyone who assumed corporate transparency was a settled direction of travel, the Court in November 2022 invalidated the provision of the anti-money-laundering framework giving the general public access to beneficial ownership registers, and member states responded by restricting access – so the ownership layer that sits conceptually next to BRIS is now available to competent authorities and obliged entities on quite different terms from everyone else. Practically: a lookup for an investigative purpose is straightforward, retention of the results engages your own data protection obligations including purpose limitation and retention limits, and systematic extraction or republication is a separate question governed by national register terms. Get the reuse position in writing before building anything that redistributes.

Operational security

A BRIS search is an ordinary web request to a European Commission portal, federated onward to one or more national registers, and both ends can log. The Commission portal sees your source address, timing and query; the national register sees a query arriving through the interconnection. In most cases this is unremarkable, but if your interest in a specific company is itself sensitive – a pre-enforcement enquiry, a hostile transaction, a national security supply chain review – then a distinctive pattern of lookups against one entity is a legible signal to anyone with access to those logs. The more significant exposure comes at the next step: ordering documents from a national register usually requires an account, sometimes a national electronic identity, and in a small number of states the transaction is recorded in a way the company can potentially discover. Where discretion matters, use a neutral network path, avoid tight bursts of queries against a single target, and consider whether a document order should be placed through a local agent rather than under your own organisation's name.

Two rules that hold regardless of jurisdiction. Collection that is lawful is not automatically proportionate, and a dataset assembled for one purpose does not carry consent for another. Where the records concern identifiable people, the question is not only whether you may hold the data but whether holding it serves the purpose you are accountable for.

Is it earning its place?

Sources accumulate. Feeds get added during an incident and are never reviewed again, and a decade later the pipeline is carrying dead weight that nobody dares remove. These are the measures that show whether EU Business Registers (BRIS) is contributing anything, and they are worth baselining now so the answer is available later.

• Proportion of companies in a case file carrying a captured EUID rather than only a name, which is the single best measure of whether your corporate entity resolution is genuinely anchored.
• Rate at which a BRIS verification contradicts the aggregated copy you were working from on status, name or address, because a high rate tells you your assumptions about aggregator refresh cycles are wrong.
• Median age of the most recent capture for entities still live in open cases, tracked so that stale snapshots are re-verified before rather than after a report goes out.
• Share of target entities falling outside BRIS scope entirely, which quantifies how much of your corporate picture the federation structurally cannot reach and should be stated in coverage sections of reports.
• Number of registered offices in the case file identified as formation-agent addresses and excluded from relationship inference, which measures whether the most common false-clustering error is being caught at all.
• Turnaround time for obtaining certified documents from each national register you use regularly, since this is usually the binding constraint on cross-border corporate work and is worth measuring per state rather than in aggregate.
• Count of findings where the register of record contradicted a paid data provider on a material point, which is the direct argument for keeping a free authoritative check in the workflow.

Beware of volume. Indicator counts rise easily and say almost nothing. Unique contribution — findings this source produced that no other source in your stack would have — is the measure that matters, and it is usually far lower than anyone expects.

Tradecraft notes

The distinctions that separate a competent analyst from a fast one:

• Anchor on the identifier, never on the name. The EUID and the national registration number survive rebrandings, translations and script conversions; the name does not, and every cross-border matching error you will make begins with treating the name as the identity.
• Read the legal form as jurisdiction information before you read it as company information. It tells you which state you are in, which filing obligations exist, and therefore which documents should be on the register and can be demanded when they are missing.
• Never translate a legal form into a supposed equivalent in another country. A GmbH is not a Ltd and a SARL is not either; liability, disclosure and governance rules differ, and an asserted equivalence in a report will be taken apart by anyone who knows the law.
• Treat the registered office as an address for service and prove physical presence separately. In several member states the majority of registered addresses belong to professional service providers, and the gap between a legal address and a place of business is where naive corporate network analysis collapses.
• A null result is not a negative finding. Before writing that a company does not exist, vary the string, drop the suffix, try the original script, try the number, and confirm the national register was reachable. Then write that the search did not find it, with the terms used, rather than that it does not exist.
• Distinguish struck off from dissolved from in liquidation in the national vocabulary and carry the national term into your write-up. Flattening them loses exactly the information determining whether there is a legal person left to sue, a liquidator to contact, or assets to trace.
• Order the certified extract early for anything contentious. The gap between a portal screenshot and an authenticated register document is the gap between an assertion and evidence, and national turnaround times mean it cannot be left to the end of a case.
• Record what you did not find as explicitly as what you did. A case file stating that no beneficial ownership was retrievable through this route on this date is far more useful eighteen months later than one that is simply silent on ownership.
• Re-query before you rely. Live data is only live at the moment you looked, and the discipline of re-verifying immediately before publication or filing is the cheapest insurance available in this discipline.

Questions analysts actually ask

Can I find out who owns a company through BRIS?

No. Shareholders and beneficial owners are outside its scope entirely. Beneficial ownership sits in separate national registers created under the anti-money-laundering framework, and public access to those was substantially restricted across the EU after the Court of Justice judgment of November 2022. Depending on who you are, you may still qualify for access as a competent authority or an obliged entity, but that is a different process with different conditions.

Is there an API?

Not a public one you should build on. BRIS has a machine-to-machine layer between registers, but the public face is an interactive search on the e-Justice Portal, and there is no documented open interface, no bulk download and no dataset. If you need volume, use the national registers that publish real APIs, or an aggregator, and use BRIS to verify the results that matter.

Why can I not find a company I know exists?

Five likely reasons and the portal will not tell you which. Its legal form may be outside the directive's scope; it may have been removed under a national retention rule after dissolution; your search string may not match the register's matching behaviour; the entity may be in a non-participating jurisdiction such as the UK since Brexit; or the national register may have been unreachable when the query was federated. Vary the query and try the national register directly before concluding anything.

Are UK companies still in BRIS?

No. The United Kingdom left the interconnection with Brexit, so UK entities must be looked up at Companies House separately. This matters more than it sounds, because UK companies and limited partnerships appear extensively in European corporate structures and an EU-only search will silently miss them.

How current is the data?

As current as the national register that answers the query, because BRIS federates rather than caches. That is a genuine advantage over any aggregated copy. It also means currency is a property of nearly thirty different national systems rather than one, and if it matters to your analysis you should establish the update behaviour of the specific register involved rather than assuming.

Can I use a screenshot of the result as evidence?

As a working record with a timestamp, yes. As evidence in proceedings, generally not – it is an unauthenticated rendering of a live query. Order a certified extract from the national register through its own process, and start that early, because turnaround varies from minutes to weeks depending on the state.

What is the EUID actually for?

It is a structured, legally grounded identifier naming the country, the register and the company number in one string, so the same company can be recognised across member states and across documents without name matching. Store it decomposed, because different counterparties will speak the national number, the register identifier or the whole EUID.

Does BRIS show company groups?

No. It records entities, and branches where they have been notified through the interconnection, but there is no parent and subsidiary modelling. A group spanning several member states appears as unconnected records, and reconstructing the structure requires ownership data, financial statement notes, LEI parent relationships or commercial datasets.

May I scrape it?

Technically it is fragile and legally it is unwise. The portal is an interactive service dispatching to live national registers, several of which are small systems, and the reuse terms for the underlying content are set nationally and range from open to prohibitive. If you need bulk data, go to the registers that publish it deliberately, where the terms are clear and the interface is designed for the purpose.

Standards, formats and interoperability

What this source speaks natively, and what it has to be translated into before a partner can consume it. Work that arrives in a recognised format is easier to defend, easier to hand over and easier to automate against:

• Directive (EU) 2017/1132 on certain aspects of company law consolidates the interconnection obligation and, through its annexes, defines exactly which company types are in scope – the definitive answer to any coverage question about this source.
• Commission implementing regulations set the technical specifications and procedures for the interconnection, including the structure of the European Unique Identifier; these have been amended and replaced more than once, so cite the instrument currently in force rather than one you remember.
• Directive (EU) 2019/1151 on the use of digital tools and processes in company law extends online formation and filing and changes what registers must make available, which is why national register capability has been shifting state by state.
• The European Unique Identifier is the identifier standard that matters here, and mapping it into your own entity model is the practical adoption step for any European corporate dataset.
• ISO 3166 country codes appear inside the EUID and in the portal's country selection, providing the join to any geographic taxonomy you already run.
• The Legal Entity Identifier maintained through GLEIF is the complementary global identifier, with published parent relationships that BRIS does not attempt to model.
• The FollowTheMoney data model used by Aleph and OpenSanctions has a Company schema with registration number, jurisdiction and incorporation date properties, which is the natural target format when moving register findings into an investigative graph.
• The platform exports resolved corporate entities in STIX 2.1, MISP, CSV and JSON, so a verified registration record travels into the same case structures as any other entity.

References

Primary documentation and authoritative references for this source. Publishers revise and retire material, so treat the retrieval date as part of the citation and re-check before relying on any of it in a formal product.

1. European e-Justice Portal — European Commission. The entry point for the public BRIS search and for the surrounding material on national registers. Navigate from here rather than from a bookmarked deep link.
2. Find a company — European Commission. The BRIS search interface itself, including the country selection and the explanation of what the harmonised result set contains.
3. Business registers – search for a company in the EU — European Commission. The topic page explaining scope, participating states and what the interconnection does and does not cover. The most useful single page for setting expectations before you search.
4. Directive (EU) 2017/1132 on certain aspects of company law — European Union. The consolidated legal basis. The annexes listing company types are the authoritative statement of which entities BRIS can contain.
5. Commission Implementing Regulation (EU) 2015/884 — European Commission. The original technical specifications for the interconnection, including the identifier structure. Check EUR-Lex for the instrument currently in force, as this area has been revised.
6. Directive (EU) 2019/1151 on digital tools and processes in company law — European Union. The digitalisation directive that has been changing what national registers must offer online, and therefore what is reachable behind a BRIS result.
7. EUR-Lex — Publications Office of the European Union. The authoritative source for EU legal instruments and for checking whether the directive or implementing regulation you are citing is still in force.
8. OpenCorporates — OpenCorporates Ltd. The practical companion for officer search, historical values and jurisdictions outside the EU, with the trade-off that it is a dated copy rather than the register.
9. GLEIF — Global Legal Entity Identifier Foundation. The LEI system and its parent relationship data, which is the open route to group structure that company registers do not provide.
10. OpenOwnership — OpenOwnership. Standards and data on beneficial ownership, and a current account of how access regimes have shifted in Europe since 2022.
11. European Commission — European Commission. Policy context on company law digitalisation and the ongoing extension of the interconnection to further entity types and documents.

Link integrity: every reference above was verified with a live request when this page was generated. Where a publisher had moved or withdrawn a document, the link was repointed at a preserved copy in the Internet Archive and marked as archived. Anything with no reachable copy anywhere had its link removed rather than left to rot — the source is still credited, it simply cannot be linked.

Put it into practice

The Quantus Intel threat intelligence platform operationalises this source: it stores the EUID as the canonical key for European corporate entities, keeps the retrieval timestamp attached to every register lookup, and screens the resolved organisation against sanctions and litigation data without ever inferring a fact the register did not state.. Browse the full source catalogue, or follow any tag above into the rest of the library.