The real owner
Through holding companies and offshore layers, down to the person.
Who really owns the company in front of you?
An investigative desk for Georgian corporate records — with the evidence attached.
Type a 9-digit code. The desk works fourteen Georgian registers, pulls a company’s whole registry file — every application, decision and scan — and reads it into one graph: the owners behind the owners, the liens, and whether any of them is sanctioned, politically exposed, or two steps from someone who is.
Banks, microfinance institutions and insurers must name a beneficial owner before they onboard a company. Today that answer is assembled by hand, one registry at a time, and filed as a screenshot. Here, it is one search and a dated file that cites where every line came from.
-
1
Enter the code
9 digits, or the company name in Georgian or English.
-
2
Follow the network
4 layers of ownership outward, drawn on one screen.
-
3
Export the file
A dated PDF that cites its source for every claim in it.
One search, drawn as it runs
What it looks for
Sanctions
The company, its owners, and anyone within reach of them.
Public officials
Declared assets and interests, and the family around them.
State contracts and court cases
What the company won from the state, and who it has been to court with.
What it replaces
What the work is today
An analyst opens the registry, the procurement portal, the sanctions lists and the court records one at a time, copies what each says into a document, and attaches screenshots. Nothing joins the four.
What that method cannot answer
Checking a name against a list answers whether the company is listed. It cannot answer whether the person who controls it is two steps from someone who is. That is the case the rules were written for.
What this does instead
One code. The ownership network around it, drawn. A dated file naming the record behind every line, and a ledger entry saying who asked and when.
The obligation is already law
Georgian anti-money-laundering law requires every bank, microfinance institution and insurer to identify the person who ultimately owns a corporate customer: anyone holding 25% or more of the shares or votes, directly or through someone else.
What the EU accession track changes is not whether that work is required. It is how much of it has to be provable afterwards.
Law of Georgia on Facilitating the Prevention of Money Laundering and the Financing of Terrorism, Article 13. The institutions named above are accountable persons under Article 3.
66
Institutions obliged to do this screening
Summed from the four supervisor registers cited below, read 19 August 2026.
81,225
Active companies, each needing a named owner
National Statistics Office of Georgia, business register, 1 July 2026.
25%
The ownership share at which the law names you
Article 13 of the anti-money-laundering law, cited above.
The institutions under that obligation can be counted, because their supervisors publish the registers: 17 licensed commercial banks, 2 microbanks and 28 microfinance organisations under the National Bank, and 19 licensed insurers. 66 institutions, and each one is a licence.
National Bank of Georgia, registers of licensed commercial banks, licensed microbanks and registered microfinance organisations; Insurance State Supervision Service of Georgia, licensed insurers. Read 19 August 2026.
81,225 companies are active on the Georgian register. Every one of them is a counterparty somebody has to name an owner for.
National Statistics Office of Georgia, business register, active commercial legal persons, 1 July 2026.
The work recurs. The owner must be identified when a corporate customer is taken on and verified again on a schedule set by risk — so the companies above are not screened once. They are screened for as long as anyone banks them.
None of this is peculiar to Georgia. Every state on the EU accession track is adopting the same directive shape — the same ownership threshold, the same obliged institutions — and the work this system proves in one such country is the work that shape requires in all of them.
The file it produces
Every screening ends in one artifact: a dated file that names its subject, draws the ownership network, and cites a source for every line in it. It is what goes into the customer file, and what an inspector is handed.
Or read one produced already: the same engine, run over the demonstration corpus of invented companies, in the language the file will be read in.
Produce one now: run a search on this instance and export the file.
Or order dossiers, one at a time
Not every reader needs a licence. A law firm with one matter, an auditor with a season of engagements, a person checking a partner before signing — choose how many subjects, and what arrives is the file shown above: cited, dated, in your language.
What the file contains
- The subject’s registry profile and identifiers, as the register records them.
- The risk assessment: band, confidence, and the drivers behind it.
- The beneficial-ownership chain — the owners behind the owners, hop by hop.
- Directors, current and past.
- Politically-exposed-person paths: how close, and through whom.
- Sanctions screening of every party in scope, against the consolidated watchlists.
- Litigation touching the subject.
- State-procurement exposure, with amounts and the total.
- Engine findings, each with severity, score, and its cited evidence chain.
- Source coverage: which registers contributed and when they were read — an outstanding source stays visible as a dashed line, never a gap.
- A content-bound document id and the tamper-evident audit reference behind the file.
| Dossiers | Each |
|---|---|
| 1–9 | GEL 95 |
| 10–49 | GEL 75 |
| 50–99 | GEL 60 |
| 100+ | GEL 45 |
The price is anchored, not plucked: the one public price for an investigated report on a Georgian company is €480 with ten days of delivery; a single machine-compiled company report retails at $139.99; the bare registry extract alone costs GEL 13–39 by the official fee schedule. A GeoShield dossier compiles fourteen registers, cited, typically within one working day. The card is typed on Stripe’s page — no payment details pass through this one.
The portal, as an analyst works it
Five screens from this same build, serving the demonstration corpus — seven invented companies and four invented people, so no real subject appears. Select any screen to enlarge it.
-
The console. A subject is found by identification code, legal name in either alphabet, or node id — and the counts under the search are read from the loaded graph.
-
A screened subject. The risk band, the confidence beside it and the source coverage it rests on, with the dossier export one press away.
-
The ownership and control network, laid out by hop distance from the subject — the sanctioned parties and the offshore layer flagged in the same palette every page uses.
-
Engine findings. Each names its severity and score and prints the evidence chain behind it, cited to the registry record it came from.
-
Evidence collection. One row per register, each answered or carrying the reason it could not be: the three that answer a query are asked from here, and the rest open in a browser window with the subject already typed in.
- NAPR · Business registry extract
- National Agency of Public Registry
- Courts · Court rulings
- Common Courts of Georgia
- ACB · Asset declarations
- Anti-Corruption Bureau
- SPA · Public procurement
- State Procurement Agency, via the open-contracting publication
- OpenSanctions · Sanctions and PEP listings
- OpenSanctions
- FITR · Foreign influence register
- Registry of Organisations Pursuing the Interests of a Foreign Power
- RS · Tax and taxpayer register
- Revenue Service
- MIA · Criminal record certificate
- Ministry of Internal Affairs
- NBE · Enforcement and debtors register
- National Bureau of Enforcement
- CEC · Voter and party finance register
- Central Election Commission
- NAEC · Education and qualification register
- National Assessment and Examinations Centre
- NAPR·web · Property applications register
- National Agency of Public Registry
- NAPR·lmr · Public-law restrictions and tax liens
- National Agency of Public Registry
- BTI · Technical inventory archive
- National Agency of Public Registry
Request early access
GeoShield is opening to a first group of institutions. What the first group gets: a pilot running beside the process you use today, on your own hardware, a direct line to the person who built the system, and a say in what it becomes next.
Everything above this line was measured on the instance serving you this page — the same build an early-access institution installs. The pilot adds your registry access and your own book, and takes nothing off your network.
Why this is hard to copy
The record of who asked
Every lookup appends to a hash-chained ledger that can be sealed and exported. A competitor can re-collect the registries; nobody can reconstruct last year’s evidence trail after the fact.
Why not a list vendor
World-Check, Orbis and their kind answer one question: is this name on a list. None of them holds the Georgian registry’s ownership graph joined to state contracts and court records — so a sanctioned party two steps out through an offshore parent, the finding at the top of this page, is not a query they can run.
It refuses to let you decide too early
While any source is still outstanding, recording a determination is refused and the missing ones are named. Software that lets an officer approve over an incomplete file is exactly what an inspection looks for.
Most of them will never be scraped
Six of the fourteen answer a machine — three the pipeline ingests whole, and three the desk questions one subject at a time. The rest answer a CAPTCHA, a Disallow: or a sign-in, so an analyst works them by hand in a window this portal opens with the subject already typed in. The extract they save and the ruling they download become records in this graph, cited to the document. What could not be got carries its reason instead of a gap that reads like a clean result.
It runs on your hardware
This instance is published for demonstration, so it serves you and not only its own machine. What ships to a customer is this same build behind your own network. The graph stays on your hardware, the portal loads nothing from any outside server, and the search on this page posts to this same portal and nowhere else.
- Try it on the invented four-company sandbox:
python run_sandbox.py. No real person is in it. - Install offline from one archive — application, packages and container images. No internet route needed.
- Point it at your registry access. Credentials are read from a
0600file, never a command line, never a log. - Put an authenticating proxy in front. This portal names nobody on its own, and says so rather than guessing.
Personal data is handled for the accountability Georgian law expects: pseudonymised identifiers in the logs, personal numbers masked on screen, one ledger entry per lookup. Whether a given deployment is compliant is your data protection officer’s finding to make, not this page’s.
How it is sold
GeoShield is sold as an annual licence to the institution: one deployment inside your network, renewed by the year. Ask for the price when you reach out for access — it is quoted in that conversation, against your institution’s own screening volume.
Run it against your own book
A pilot points this at the registry access you already have and runs beside the process you use today, on your hardware. What comes back is the same dated file, for subjects you can check yourself.
Reading this as an investor rather than a compliance officer? The same person answers — and the numbers you would diligence are printed above, each with its source.
Giorgi Gusharashvili · Founder, GeoShield · The founder’s record