Legal Intelligence (LEGINT): Intelligence Discipline Guide

Litigation is an involuntary disclosure engine. Adversaries in court say, under oath and on the public record, what they will never put in a press release.

What Legal Intelligence is as a discipline

Legal intelligence is the systematic exploitation of courts, regulators and legislatures as collection platforms. It treats dockets, pleadings, exhibits, enforcement actions, consent orders, insolvency filings, regulatory correspondence and legislative records as structured reporting about organisations and individuals. The discipline covers three streams: litigation intelligence, which reads what parties assert and concede in adversarial proceedings; regulatory intelligence, which tracks supervisory findings, licence conditions and enforcement posture; and legislative intelligence, which anticipates how rule changes will alter an adversary's operating environment or a client's obligations.

Sub-methods include docket monitoring and alerting, exhibit mining for contracts and internal documents, expert report analysis for technical ground truth, judgment enforcement tracing, and cross-referencing corporate registries with case parties. Within the intelligence cycle, legal intelligence is unusually strong at validation: because filings are made under penalty and tested by an opponent, they provide a corroboration layer for claims sourced from weaker open material.

Why it matters

Only legal intelligence establishes what an entity has formally admitted, been ordered to do, or failed to defend. It answers whether a dispute is a commercial disagreement or a pattern of conduct, which regulator already holds adverse findings, who the beneficial claimants and creditors really are, and what internal documents exist and where they surfaced. It answers whether a counterparty is judgment-proof, and it dates knowledge: filings show precisely when an organisation first learned of a defect, breach or exposure.

What analysts actually look for

These are the concrete, observable signals that carry weight in this area of work:

• Complaint and answer text where a party concedes structure, ownership, revenue mechanics or the existence of internal documents
• Exhibits attached to motions: contracts, invoices, emails and org charts that entered the public record as evidence
• Expert witness reports containing technical detail about products, processes or damages unavailable in any commercial source
• Regulatory consent orders and settlements specifying prohibited conduct, monitorships, and admitted facts with dates
• Insolvency and receivership filings listing creditors, related-party loans and asset transfers preceding collapse
• Repeat-party patterns showing the same counsel, expert or plaintiff structure across superficially unrelated actions
• Sealing and protective order activity indicating which subject matter a party regards as most sensitive
• Legislative and rulemaking comment dockets revealing which firms lobby on which specific provisions

Where the data comes from

Authoritative and openly available collection points. Always confirm licensing and terms before operational or commercial use:

• CourtListener and RECAP Archive — Free searchable US dockets, opinions and a growing archive of filed PDFs, with saved-search alerting
• PACER — Definitive US federal filings including documents not yet mirrored publicly; pay-per-page with fee waivers below a threshold
• SEC EDGAR — Litigation disclosures, legal proceedings sections, 8-K event reporting and correspondence letters from the regulator
• EUR-Lex and CURIA — EU legislation, case law and Court of Justice proceedings, including competition and sanctions challenges
• BAILII and UK judiciary judgments — Free full-text UK and Irish judgments, useful for beneficial ownership and fraud findings
• WIPO Lex — National intellectual property and related laws and treaties by jurisdiction, for regulatory baseline work
• Regulator enforcement databases — FINRA BrokerCheck, FCA register, FTC and DOJ press and case pages for adverse findings on firms and individuals
• National corporate registries — Companies House, OpenCorporates and equivalents to link case parties to directorships and ownership chains

A working method

A repeatable sequence beats ad-hoc searching. This is a practical starting workflow:

1. Define the legal question — Decide whether you need admitted facts, exposure quantification, counterparty solvency or regulatory posture. Each drives a different filing type and search strategy.
2. Sweep party names and variants — Search dockets on registered names, former names, subsidiaries and known officers, since parties are often captioned under entities the subject rarely uses publicly.
3. Pull the docket, not the summary — Read the docket sheet to identify motions with attached exhibits and expert reports, then retrieve those documents rather than relying on case abstracts.
4. Mine exhibits for primary material — Extract contracts, correspondence and financial schedules from attachments, recording exhibit numbers and filing dates for citation.
5. Cross-reference regulators — Check whether the same conduct appears in supervisory actions, licence conditions or settlement agreements in other jurisdictions.
6. Build the chronology — Date every admission and order to establish when the entity knew what, which is usually the decisive analytical output.
7. Monitor forward — Set docket and register alerts so new filings, appeals and enforcement steps reach you rather than requiring rediscovery.

How this connects across the intelligence taxonomy

Intelligence work does not respect neat boundaries. The mission domain you are working, the disciplines you practise, and the data points you pivot on are one connected system. These are the direct relationships for this entry — every link is also a tag, so you can follow any thread across the whole library.

Applied in these mission domains

• Insider Threat
• Organized Crime
• Human Trafficking
• Wildlife Trafficking
• Child Protection
• Gangs & Street Crime
• Counterfeiting & IP Crime
• Art & Antiquities Trafficking
• Mining & Resource Crime
• Forced Labour & Modern Slavery

Operates on these data points

• Person / Name — A named individual — the subject of identity resolution and profiling.
• Company / Organization — A legal entity — corporation, LLC, NGO, or business.
• Event / Incident — A discrete real-world occurrence — protest, strike, breach, seizure — with time, place, and actors.
• Court Case / Docket — A filed legal proceeding — the authoritative record of disputes, judgments, and enforcement.
• Location / Coordinates — A geographic point, place, or region — the basis of GEOINT analysis.
• Shipment / Bill of Lading — A consignment record linking shipper, consignee, goods, and route.
• Social Profile — A social media profile or online account page tied to a persona or identity.
• Cryptocurrency Address — Blockchain wallet address for receiving or sending crypto assets.
• Phone Number — Telephone number for voice, SMS, or messaging identification.
• Messaging Handle — An identity on a messaging platform (Telegram, Signal, Discord) used for coordination and sales.

Related disciplines

• Criminal Intelligence — Intelligence Supporting Criminal Investigation

Inside the platform: where Legal Intelligence lives

The Quantus platform is 204 pages behind a 147-item sidebar organised into six working groups: Command (24 items), Dashboards (15), Threat Theaters (14), Intelligence Domains (15), Investigate (34), and Administration (45). This entry is not a page in isolation — it is a thread running through several of them.

The modules that matter most here:

• discipline.php?d=LEGINT — Discipline hub
• source-catalog.php?disc=LEGINT — Source catalogue filtered to this discipline
• search.php — Person / Name profile
• correlate.php — Correlation graph
• cases.php — Case management

Each dashboard is local-first: it renders from the platform’s own database rather than depending on a live third-party call, so it still works when an upstream API is unreachable or rate-limited. Heavy aggregates are cached with a hard query time cap and degrade to the last good value instead of hanging the page.

Automation, playbooks and AI skills

Analysis that only happens when someone remembers to run it is not a capability. The platform ships a 30-step automation pipeline (cron.php) that collects, ingests, resolves, enriches, correlates and scores on a schedule — 25 seeders, 11 resolvers and 7 enrichment runners, all idempotent and cursor-based so a run can be interrupted and resumed without duplicating or losing work.

AI skills that apply

The 16 one-click operations in ai-skills.php are deterministic jobs, not free-text generation. The ones that matter here:

• Threat Hunt
• Auto-Collect Feeds
• Enrichment → Local
• Summarise (Copilot)
• Generate Report

Alerting closes the loop: rules in alerts.php fire on new indicators matching a saved query, so a first sighting in this area raises a notification rather than waiting to be noticed at the next review.

Feeds, data sources and the API

The collection layer runs a feed registry of free, machine-readable sources — bulk blocklists and trackers (Maltrail, IPsum, FireHOL, the full abuse.ch corpora, phishing databases, Emerging Threats, Spamhaus, DigitalSide, ThreatView), authoritative government feeds (CISA KEV, OFAC, UN and EU sanctions lists), and reference datasets (RIR allocations, ip-to-ASN and geolocation tables, MITRE ATT&CK, EPSS). collect.php pulls them server-side on a schedule; feeds.php and source-catalog.php show what is registered, what it covers and when it last ran.

Anything the platform holds is reachable programmatically. The REST API in api.php exposes 11 endpoints — status, stats, search, lookup, recent, export, bulk_check, top_threats, by_category, categories, check — and export.php streams 18 formats in bounded chunks, so a million-row export neither exhausts memory nor times out:

STIX 2.1, MISP, OpenIOC 1.1, CEF (ArcSight), LEEF 2.0 (QRadar), Zeek/Bro intel, Snort/Suricata rules, Palo Alto EDL, BIND RPZ, hosts blackhole, iptables, CSV, JSON, NDJSON/JSONL, XML.

That covers the CTI standards (STIX 2.1, MISP, OpenIOC), SIEM ingestion (CEF, LEEF, Zeek), detection engines (Snort/Suricata), and direct enforcement (Palo Alto EDL, BIND RPZ, hosts, iptables) — so intelligence developed here can be actioned in the tools you already run, without a manual reformatting step. A TAXII 2.1 server and a MISP/RSS feed are also served for pull-based sharing.

Use cases

Three ways this entry earns its keep in day-to-day work:

1. Triage under time pressure. An artifact or report lands and you need a defensible read in minutes, not days. Define the legal question is the first move; the platform pre-computes the enrichment so the analyst spends the time on judgement rather than lookups.
2. Building the picture. A single indicator is rarely the story. Pull the docket, not the summary turns one artifact into a network — shared infrastructure, repeated selectors, the same operator behind different names — via the correlation graph and the cross-entity link engine.
3. Producing something actionable. Analysis that ends in a document nobody can use is wasted. Monitor forward feeds the case file, the detection rule, the block list or the referral — with sourcing attached so the recipient can verify it.

Case management (cases.php), watchlists, saved searches and scheduled reports mean the work persists between sessions and survives an analyst leaving the team.

How each sector uses Legal Intelligence

The same entry is worked very differently depending on who you are, what authority you hold, and what you are ultimately producing. A military analyst is supporting a commander’s decision; a journalist is meeting a publication standard; an NGO caseworker is protecting a person. The underlying artifacts are shared — the constraints, outputs and thresholds are not.

🎖 Military and defence

Defence users read litigation and regulatory records to understand the industrial base and the operating environment. Contract disputes, bid protests, insolvency proceedings and export control enforcement expose which suppliers are financially fragile, which programmes are slipping and which foreign entities have already been found in breach. In theatre, host nation court and land registry records help identify property ownership, competing claims and local power structures relevant to basing and civil-military coordination. Products feed acquisition risk assessments, supplier vetting and civil affairs briefs. The main constraint is access: foreign court records are frequently unavailable or unreliable, and legal conclusions require counsel rather than analysts.

🕵 National intelligence

National intelligence treats litigation as a validation layer. Statements made under penalty of perjury and tested by an opposing party carry weight that press reporting and vendor claims do not, so filings are useful for confirming or refuting judgements sourced from weaker material. Enforcement actions, deferred prosecution agreements and insolvency proceedings expose corporate structures, beneficial owners and procurement channels relevant to sanctions and proliferation work. Because the material is open, it also solves a persistent dissemination problem: findings derived from public filings can be shared with partners, regulators and industry without exposing classified collection or triggering originator control disputes.

👮 Law enforcement

For law enforcement, legal intelligence is both lead generation and corroboration. Civil filings frequently surface conduct years before a criminal referral, and exhibits attached to motions can contain contracts, correspondence and financial schedules obtained through civil discovery. Investigators must be careful about how such material is used: documents produced under a protective order or covered by legal professional privilege cannot simply be repurposed, and material taken from a civil case may need to be independently obtained by production order to be evidentially clean. Docket analysis also identifies asset holdings and judgment creditors, which supports restraint and confiscation planning.

🔍 Private investigation and corporate security

This is the private sector's strongest lawful collection channel. Due diligence teams use dockets to establish litigation history, pattern conduct, solvency and regulatory findings, and to identify internal documents that surfaced in prior cases. Litigation support extends to locating experts, tracking parallel proceedings and building judgment enforcement pictures. The constraints are procedural rather than access-based: sealed material must never be sought through improper channels, scraping must respect access terms and rate limits, and in some jurisdictions using court records to make employment, credit or tenancy decisions about individuals triggers consumer reporting obligations that a private investigator is not licensed to meet.

📰 Journalism and OSINT media

Journalists rely on filings because they are quotable, dated and attributable to a party rather than to a source. The verification standard is to read the docket rather than the complaint alone: an allegation in a complaint is a claim, a stipulated fact or a judicial finding is something stronger, and a dismissal without prejudice means very little. Reporting must distinguish these clearly and give the subject a meaningful right of reply. Fair report privilege in many jurisdictions protects accurate accounts of proceedings but not embellishment. Watch reporting restrictions, sealed exhibits filed publicly in error, and personal data of uninvolved third parties.

🌍 NGO, humanitarian and human rights

Human rights and accountability organisations use legal records to establish corporate knowledge and to build case files for strategic litigation, sanctions advocacy and UN mechanisms. Regulatory findings and consent orders provide dated official confirmations of conduct that survive denial. Victim-centred practice means avoiding republication of identifying details of claimants and witnesses that appear in filings, particularly in sexual violence, trafficking and asylum matters where the court may have made anonymity orders. Duty of care extends to local partners who search records in jurisdictions where litigation research against powerful actors carries personal risk, and to preserving material before it is removed.

🎓 University and research

Researchers use court and regulatory records for empirical legal studies, corporate governance research and compliance evaluation. Methodological care centres on selection effects: filed cases are not a random sample of disputes, settlements are invisible, and coverage varies dramatically by jurisdiction and court level. Bulk collection needs ethics review where filings contain identifiable personal data, and terms of access for docket systems often restrict redistribution of retrieved documents. Reproducibility requires publishing the query, the court set, the date range and the retrieval date, and archiving case identifiers rather than documents where licensing prevents sharing.

Playbook: working Legal Intelligence end to end

A repeatable sequence, from the moment the requirement lands to the moment a product is delivered and the case is closed out. Each phase states what you are trying to establish, not merely what to click — the point is a defensible chain of reasoning, not a checklist.

Phase 1 — Frame the legal question precisely

Decide which of four things you actually need: admitted facts, exposure and quantum, counterparty solvency, or regulatory posture. Each drives different filing types, courts and search strategies, and confusing them wastes days. A good output is a written question naming the entity, the conduct, the relevant period and the decision it supports. Stop when you can state which document type would answer the question if it existed, because that tells you where to look and when to give up.

Phase 2 — Build the party name universe

Assemble every name under which the subject could be captioned: registered legal names, former names, trading names, subsidiaries, holding companies, general partners, named officers and known aliases. Pull these from corporate registries and prior filings rather than from the website. A good output is a search list with entity identifiers attached. Stop when new registry passes stop producing new names, and note explicitly which jurisdictions you could not search so the coverage limit is visible in the product.

Phase 3 — Sweep dockets systematically

Search federal, state, appellate and specialist courts separately, since coverage and search behaviour differ, and record for each court whether you achieved full text search or caption search only. Do not stop at the first relevant case. A good output is a case inventory with court, docket number, filing date, parties, cause of action and current status. Stop when the sweep has covered the jurisdictions where the entity actually operates, not merely those with convenient online access.

Phase 4 — Read docket sheets before documents

The docket sheet is the map. It tells you which motions carry exhibits, where expert reports were filed, whether there is a protective order, what was sealed, and how the case actually ended. Reading it first prevents buying fifty irrelevant pages. A good output is a marked docket identifying the ten to twenty entries worth retrieving. Stop retrieving once the marked entries are in hand, and note sealed entries as known unknowns rather than ignoring them.

Phase 5 — Mine exhibits for primary material

Attachments to summary judgment motions and expert reports are where contracts, internal emails, financial schedules and technical specifications enter the public record. Extract them, record exhibit numbers and filing dates, and preserve the original document with its docket stamp. A good output is a document set where every extracted page can be cited to a docket entry. Stop when you have the documents that bear on the question; do not build an archive because the material is interesting.

Phase 6 — Read the outcome, not the allegation

Distinguish pleaded allegations, stipulated facts, admissions, findings of fact, judgments, consent orders and settlements without admission. These have radically different evidential weight, and conflating them is the most common error in this discipline. A good output annotates every asserted fact with its status. Stop and re-check whenever a striking claim traces only to a complaint, because complaints are advocacy documents drafted to survive a motion to dismiss.

Phase 7 — Cross-reference the regulatory record

Check whether the same conduct appears in securities enforcement, competition proceedings, sectoral supervision, environmental or health and safety enforcement, and licence conditions in other jurisdictions. Regulators often act where private litigation failed, and their findings are typically better documented. A good output is a matrix of conduct against regulator by jurisdiction and date. Stop when every jurisdiction in which the entity is licensed or listed has been checked.

Phase 8 — Trace insolvency and enforcement

Pull bankruptcy, administration, liquidation and receivership filings, which are unusually rich: schedules of assets and liabilities, creditor lists, statements of affairs, examiner reports and avoidance actions. Judgment enforcement records show whether awards were ever collected. A good output tells you whether the counterparty is judgment-proof and who the real creditors are. Stop when you can state the entity's solvency posture and the priority ranking of claims against it.

Phase 9 — Build the knowledge chronology

Date every admission, disclosure, notification and order to establish when the organisation first knew of a defect, breach or exposure, and what it did afterwards. This chronology is usually the decisive output, because knowledge dates determine liability, disclosure failures and whether conduct was negligent or deliberate. A good output is a dated table with a document citation per row. Stop when the sequence is continuous enough that a gap would be visible rather than assumed away.

Phase 10 — Reconcile with corporate and financial records

Match case parties to registry entities, ultimate beneficial owners and listed group structures, and check whether litigation disclosed in annual reports matches the docket record. Undisclosed material litigation is itself a finding. A good output identifies which legal entity within a group actually bears the exposure. Stop when every named party maps to a registry record or is documented as unresolvable, since unresolved parties are frequently the interesting ones.

Phase 11 — Set forward monitoring

Create docket alerts, regulator publication feeds, gazette monitoring and register watches so appeals, new filings, enforcement steps and status changes reach you automatically. Legal intelligence decays fast: a solvent counterparty can be in administration within a quarter. A good output is a monitoring schedule with named owners and a review cadence. Stop adding alerts when noise volume begins causing them to be ignored, and tighten the filters instead.

Phase 12 — Produce with status labels and caveats

Write the product so that every factual claim carries its legal status and source citation, state which jurisdictions and court levels you could not search, and separate what is established from what is alleged. Include a plain statement that the analysis is not legal advice and that opinions on infringement, liability or freedom to operate require qualified counsel. A good output survives being read by the subject's lawyers. Stop before characterising the merits of live proceedings.

The platform ships this as a step-checked workflow in playbooks.php, so progress is recorded against a case rather than held in someone’s head.

Source register: what to collect from, and how

Sources are listed with their access model so you can plan around cost and licensing before you build a dependency on them. Open means no account required; registration means a free account or API key; licensed means paid or institutional access. Always confirm current terms — licensing changes, and a source that was free for research may not be free for commercial or evidential use.

Source	Access	What it gives you	How it is used here
CourtListener and RECAP Archive	Open	Free full text US federal opinions, dockets and contributed PACER documents with a public API and docket alerting	Primary sweep for US federal litigation history and ongoing monitoring without incurring per-page charges
PACER	Registration	Official US federal district, bankruptcy and appellate docket sheets and filed documents, billed per page	Authoritative retrieval of exhibits, expert reports and bankruptcy schedules not yet in free archives
SEC EDGAR	Open	US securities filings including annual and quarterly reports, current reports, legal proceedings disclosure and filed contracts	Cross-checks whether disclosed proceedings match the docket record, and supplies filed contracts as exhibits
EUR-Lex	Open	Consolidated EU legislation, treaties, preparatory acts and case law with multilingual full text and stable identifiers	Establishes the governing instrument and its amendment history for regulatory and legislative questions
CURIA, Court of Justice of the European Union	Open	Judgments, opinions and case information from the Court of Justice and the General Court including competition appeals	Confirms the final legal position after Commission decisions are challenged, which often changes the finding
BAILII	Open	British and Irish case law and legislation including senior court judgments and tribunal decisions	Primary route to UK and Irish judgments for litigation history and judicial findings against an entity
Find Case Law, The National Archives	Open	Official repository of court and tribunal judgments in England and Wales with structured metadata and bulk access	Authoritative and citable source for UK judgments, better structured than aggregator copies
WIPO Lex	Open	Global collection of intellectual property laws, treaties and judicial decisions submitted by member states	Establishes the applicable national IP regime when assessing cross-border enforcement exposure
Companies House	Open	UK registry of companies with filing history, officers, charges, insolvency notices and persons with significant control	Maps case parties to legal entities, exposes charges over assets and confirms insolvency status
OpenCorporates	Registration	Cross-jurisdiction aggregation of company registry data covering officers, addresses, status and corporate groupings	Builds the party name universe before a docket sweep, including former names and dormant subsidiaries
US Department of Justice case announcements	Open	Announcements of charges, pleas, deferred prosecution agreements and settlements with linked charging documents	Identifies criminal exposure and cooperating entities, and dates the point of formal government action
European Commission competition case register	Open	Antitrust, cartel, merger and state aid decisions with non-confidential versions and procedural history	Establishes findings of infringement, fines and commitments that constitute determined conduct
Italaw investment arbitration collection	Open	Awards, decisions and pleadings from investor-state arbitrations, frequently with detailed factual records	Exposes state and corporate conduct in resource and infrastructure disputes invisible in domestic courts
EU Publications Office official journal and tenders	Open	Official publication of EU legal acts, notices, insolvency and procurement information	Often the only public record of regulatory action in jurisdictions without searchable case databases
OCCRP Aleph	Registration	Indexed archive of court records, registries, leaks and procurement data searchable by entity across collections	Finds proceedings and filings in jurisdictions where no searchable national docket system exists at all
Financial Conduct Authority and equivalent supervisory registers	Open	Authorisation status, permissions, disciplinary notices and enforcement decisions against regulated firms and individuals	Establishes regulatory posture and prior findings that private litigation may never have reached

Prefer sources that publish a methodology and a revision history. A dataset that changes silently is a liability in any product that has to survive challenge.

Tooling

Tools commonly used against Legal Intelligence. None of these replace judgement, and each carries its own failure modes — know what a tool infers versus what it observes.

• CourtListener API and docket alerts — Programmatic search and change notification across US federal dockets; excellent coverage of opinions, patchier for state trial courts.
• RECAP browser extension — Contributes retrieved PACER documents to the public archive; reduces cost over time but only covers what users have purchased.
• Westlaw, Lexis or vLex — Commercial legal research with citation treatment and headnotes; unmatched depth and currency, but licensing prevents redistribution of retrieved text.
• Docket Alarm or Trellis — Commercial docket aggregation extending into US state trial courts; fills the biggest coverage gap at meaningful subscription cost.
• OCRmyPDF and pdfplumber — Convert scanned exhibits into searchable text for mining; accuracy drops sharply on poor scans and handwritten annotations.
• Tabula — Extracts tables from PDF financial schedules and creditor lists into structured data; struggles with merged cells and multi-page tables.
• Hunchly and web archiving tools — Timestamps and hashes retrieved pages and documents; important because filings are periodically sealed or withdrawn after publication.
• OpenRefine with GLEIF reconciliation — Matches case parties to legal entity identifiers; effective for regulated entities, weaker for private companies and partnerships.
• Zotero or another citation manager — Maintains docket and exhibit citations with retrieval dates; essential for products that must be re-verified later, though not built for legal citation formats.

AI skills and automation in detail

These are deterministic jobs with defined inputs and outputs, not open-ended prompting. Each is idempotent and cursor-based: interrupt one and it resumes where it stopped rather than duplicating work or losing progress.

• Threat Hunt — Runs saved hypotheses against the corpus and surfaces what matches, with the query preserved as a versioned artifact.
• Auto-Collect Feeds — Pulls the registered feed set server-side on a schedule, recording per-feed status so a silently dead feed is visible.
• Enrichment → Local — Materialises enrichment into the local store so dashboards render from your own database instead of a live third-party call.
• Summarise (Copilot) — Produces a narrative summary beside the underlying records. It explains; it never creates indicators or assigns attribution.
• Generate Report — Assembles a sourced product from the current case or query, with provenance attached to each element.

A note on the boundary: the only skill that involves a language model is Summarise (Copilot), and it writes prose about records that already exist. Nothing else on this list involves generation of any kind. No indicator, relationship or attribution in the platform originates from a model. See the full skill list.

Tradecraft notes

The distinctions that separate a competent analyst from a fast one:

• A complaint is an argument, not a finding. Allegations are drafted to survive dismissal, not to be true. Weight pleadings low, stipulated facts and judicial findings high, and treat settlement without admission as evidence of commercial calculation rather than of conduct.
• The docket sheet is worth more than most documents. It reveals sealed material, protective orders, discovery disputes and how the case actually terminated. Analysts who go straight to the complaint routinely miss the exhibits carrying the real content.
• Companies are sued under names they never use publicly. Build the party universe from registries and prior captions first, or you will report a clean litigation history for an entity that has been sued forty times through subsidiaries.
• Dates of knowledge are the highest-value output. Filings show precisely when an organisation was notified of a defect, breach or claim, and what it did next. That chronology usually determines liability and disclosure exposure more than the conduct itself.
• Absence of litigation may reflect arbitration clauses rather than good behaviour. In sectors that arbitrate routinely, a clean docket means disputes are confidential, not that there were none. Check contract terms and arbitral institution caseload before drawing comfort.
• Expert reports are underused technical intelligence. They contain the most rigorous public analysis of a product, market or failure mode that will ever exist, prepared by a specialist and tested by an opponent. Mine them for facts, not just opinion.
• Do not opine on the law. An analyst can report what a court found and what a regulator ordered. Assessments of infringement, liability or freedom to operate are legal advice and belong to qualified counsel; offering them creates exposure for you and your client.

Measuring whether it is working

Capability claims should be falsifiable. These are the measures that show whether work on Legal Intelligence is producing anything, and they are worth baselining before you change process or tooling.

• Proportion of due diligence reports where a material proceeding is later discovered that the sweep missed, tracked by jurisdiction to expose systematic coverage gaps.
• Median time from a new filing or enforcement action involving a monitored entity to it reaching the analyst through alerting rather than through news.
• Share of factual claims in delivered products carrying an explicit legal status label and a docket or decision citation.
• Number of decisions changed by a legal intelligence finding, such as a counterparty rejected, a contract renegotiated or an investigation opened.
• Accuracy of solvency assessments measured against outcomes twelve months later, including counterparties that entered insolvency after being assessed as sound.
• Cost per retrieved document, tracked to show whether docket triage is working or whether the team is buying pages it does not read.
• Rate of corrections or complaints arising from misstated case status, which is the discipline's characteristic error mode.

Beware of measuring volume alone. Indicator counts and report counts rise easily and say little; time-to-attribution, proportion of findings that survive review, and how often a product changed a decision say a great deal.

Common pitfalls

• Reading allegations as findings. A complaint is an assertion by an adversary; only judgments, admissions and consent orders carry probative weight
• Assuming the public docket is complete. Sealed filings, redactions and unmirrored documents mean absence of a filing proves nothing
• Ignoring jurisdictional reach: a finding in one forum may be legally irrelevant or inadmissible in the forum your client operates in
• Missing cases filed under obscure subsidiary or trading names, producing a falsely clean litigation profile for a heavily litigated group
• Treating settled matters as exonerating when settlement terms frequently include no admission of liability by design
• Overlooking that dismissed and vacated matters may carry expungement or reporting restrictions in some jurisdictions

Legal and ethical considerations

Court records are largely public, but access rights are not universal and vary sharply by jurisdiction. Sealed material must not be sought through improper channels, and scraping must respect terms of access and rate limits. Personal data appearing in filings remains subject to data protection law when reused, particularly in the EU and UK where publication in a docket is not a licence for indefinite retention. Using litigation records to make consequential decisions about individuals may trigger consumer reporting obligations in some jurisdictions.

Data integrity: no fabrication, no drift, no hallucination

Intelligence that cannot be traced back to a source is not intelligence, it is assertion. Everything in this entry — and everything in the platform behind it — is built on a small number of non-negotiable rules.

Provenance on every record

Every indicator carries the source that supplied it, a first-seen and last-seen timestamp, and a sighting count. Where several feeds report the same artifact, each contribution is recorded separately rather than collapsed, so you can see whether a finding rests on one source or twelve. Source attribution travels with the data into every export, so a recipient can audit a claim without asking you for the working.

Nothing is invented to fill a gap

If the platform has no data for Legal Intelligence, it says so. Empty is displayed as empty — never padded with plausible-looking placeholder values, sample records or illustrative examples that a reader might mistake for observations. A dashboard with no rows is a true statement about collection coverage, and it is treated as a gap to close, not a blemish to hide.

Scoring is deterministic and reproducible

Threat scores, reputation grades and risk tiers are computed from stated inputs with fixed weights, not estimated. The same inputs always produce the same output, and the formula is visible rather than a black box. Aggregates are cached with an explicit time-to-live so a figure on screen is never silently stale — and when a heavy query exceeds its time budget the platform serves the last known-good value and labels it, rather than inventing a fresh number or hanging.

Where AI is used, and where it is not

Language models summarise and explain. They do not create indicators, assign attribution or manufacture relationships. No IP address, wallet, hash or identity in the platform originates from a model — every one is ingested from a named feed, resolved from a reference dataset, or entered by an analyst with a source recorded. Copilot output is presented as narrative alongside the underlying records, never in place of them, so a reader can always check the summary against the evidence.

Guarding against drift

Enrichment is additive and timestamped rather than overwriting. Reference data — sanctions lists, allocations, taxonomies — is re-synchronised from the authority on a schedule instead of being edited in place, so local copies cannot quietly diverge from the source of truth. Attribution is recorded with a confidence level and the reporting it rests on, and inferred relationships are labelled as inferred. When a source retracts or corrects, the correction propagates rather than leaving a stale assertion behind.

What this means for you

You can put a finding from this platform in front of a regulator, a court, a board or a partner agency and show where each element came from. That is the standard the tooling is built to — because in this work, being confidently wrong is more damaging than being usefully uncertain.

By the numbers

The taxonomy this entry belongs to is not a marketing list — it is the actual structure of the platform: 52 mission domains, 52 intelligence disciplines and 65 data points, each with a live dashboard behind it. Supporting that: 18 indicator types, 14 playbooks, 16 AI skills, 18 export formats and a 30-step automated pipeline.

This particular entry connects directly to 10 data points, 10 mission domains, 1 closely related entries — every one of them a tag you can follow, and a dashboard you can open.

Questions analysts actually ask

Is a case that was dismissed still intelligence?

Often yes, but for different reasons. Read why it was dismissed. Dismissal for lack of jurisdiction or on procedural grounds says nothing about the underlying conduct, and the complaint may still identify witnesses, documents and dates worth pursuing elsewhere. Voluntary dismissal frequently signals settlement. Dismissal on the merits after full argument is a substantive finding for the defendant. The intelligence value of a dismissed case usually lies in the exhibits filed before dismissal and the chronology the pleadings establish, not in the allegations themselves, which should never be reported as findings.

How do I handle sealed material that appears publicly by mistake?

Do not retrieve, circulate or rely on it. Sealed material appearing on a public docket through clerical error remains sealed in law, and using it can expose you and your client to contempt proceedings and can taint an otherwise clean investigation. Note that a sealed entry exists, since that fact is often analytically relevant, and record its docket number and date. If the material has already reached you, take legal advice before doing anything else. The same applies to documents obviously covered by legal professional privilege.

Can I rely on the docket of a foreign court I cannot read?

Only with a qualified translation and local knowledge of procedure. Machine translation of legal text routinely inverts meaning on procedural terms, and outcomes depend on posture that has no direct equivalent across systems. The safer approach is to report the existence, parties, court, dates and stated cause of action from the record, then commission local counsel for the substance. Also confirm what the jurisdiction publishes: in many countries only appellate decisions appear online, so first instance litigation is systematically invisible and its absence proves nothing.

How far back should a litigation sweep go?

Match the period to the decision. Counterparty diligence usually needs ten years, or the entity's full life if shorter. Pattern conduct analysis needs everything available, because the point is recurrence. Solvency work needs the last three to five years plus any charges over assets. Be aware that online coverage thins rapidly before roughly 2000 in most systems, so the absence of older cases is a coverage artefact rather than a finding, and the product should say so explicitly rather than implying a clean history.

What is the difference between a consent order and an admission?

A consent order resolves a proceeding on agreed terms and typically records that the respondent neither admits nor denies the findings, while still imposing binding obligations, penalties and sometimes an agreed statement of facts. Treat the obligations and any agreed facts as established, and treat the underlying allegations as unproven unless the order says otherwise. In some regimes, notably certain securities and competition settlements, the respondent does admit specified facts, and those admissions are among the strongest evidence available in open source. Read the order, not the press release.

Are court records fair game for reuse under data protection law?

Publication in a docket is not a general licence to reuse personal data. In the EU and UK, reusing personal data from filings for profiling, screening or retention engages data protection law, and you need a lawful basis, purpose limitation and retention limits. In the United States, using court records for decisions about employment, credit, insurance or tenancy can bring you within consumer reporting law, which imposes accuracy, dispute and disclosure duties. Minimise personal data of uninvolved third parties, and do not build standing databases of named individuals without a documented basis.

How do I find litigation in a country with no online docket system?

Work through indirect traces: official gazettes, insolvency notices, licence revocations, regulator bulletins, chamber of commerce filings, law reports, arbitration institution statistics and local language press archives. Corporate filings in other jurisdictions frequently disclose foreign proceedings against group companies. Local counsel searching court registries in person remains the only reliable method in many systems. Record clearly in the product that coverage was indirect, because a clean result from an unsearchable jurisdiction is not a clean result and should never be presented as one.

Standards, frameworks and further reading

Work that references a recognised framework is easier to defend, easier to hand over, and easier for a partner to consume:

• Fair report privilege and its equivalents, which protect accurate and contemporaneous accounts of public proceedings but not characterisation beyond the record.
• Federal Rules of Civil Procedure and equivalent national codes, which determine what is filed publicly, what may be sealed and how exhibits enter the record.
• US Fair Credit Reporting Act, which brings certain uses of public record data about individuals within regulated consumer reporting and imposes accuracy and dispute duties.
• UK GDPR and Regulation (EU) 2016/679, governing reuse of personal data appearing in filings including purpose limitation, retention and data subject rights.
• Criminal Procedure and Investigations Act disclosure regime and equivalent duties, relevant where civil filings are used to support a criminal investigation.
• UNCITRAL and ICSID arbitration rules and institutional transparency rules, which determine whether investor-state and commercial arbitration material is public at all.
• Legal professional privilege and work product doctrine, which limit what may lawfully be retained and used even where a document has become publicly accessible.
• FATF Recommendations on customer due diligence, which specify adverse media and legal proceedings checks as part of enhanced diligence.

References

Primary sources and authoritative references for this entry. Publishers revise and retire material, so treat the retrieval date as part of the citation and re-check before relying on any of it in a formal product.

1. RECAP Archive and CourtListener — Free Law Project. Open archive and API for US federal dockets, opinions and contributed filings
2. PACER service documentation — US Administrative Office of the Courts. Official documentation of federal docket access, fee structure and coverage by court
3. EDGAR full text search and filer documentation — US Securities and Exchange Commission. Repository of securities filings including disclosed legal proceedings and filed contracts
4. EUR-Lex access to European Union law — Publications Office of the European Union. Authoritative source of EU legislation, case law and preparatory documents
5. Case law of the Court of Justice of the European Union — Court of Justice of the European Union. Judgments and opinions determining the final position on challenged regulatory decisions
6. Find Case Law service — The National Archives (UK). Official publication of England and Wales court and tribunal judgments with structured metadata
7. British and Irish Legal Information Institute collections — BAILII. Free access to UK and Irish judgments, legislation and tribunal decisions
8. WIPO Lex database of IP laws and judgments — World Intellectual Property Organization. Member state intellectual property legislation, treaties and selected judicial decisions
9. Competition case register — European Commission Directorate-General for Competition. Antitrust, cartel and merger decisions with published non-confidential versions
10. FATF Recommendations — Financial Action Task Force. International standard requiring adverse legal proceedings checks within customer due diligence

Link integrity: every reference above was verified with a live request when this page was generated. Where a publisher had moved or withdrawn a document, the link was repointed at a preserved copy in the Internet Archive and marked as archived. Anything with no reachable copy anywhere had its link removed rather than left to rot — the source is still credited, it simply cannot be linked.

Put it into practice

The Quantus Intel threat intelligence platform operationalises this entry: monitors dockets, regulators and registries in one feed and links parties to your existing entities. Explore the platform, or browse the rest of the library by following any tag above.