an abstract photo of a curved building with a blue sky in the background

Before you trust, investigate.
Before you invest, verify.

I work at the intersection of law, investigation and intelligence to answer three questions: what the information means, what is missing, and what decision it supports.

Contact

About

Carol Castier

I have been a lawyer in Brazil since 2010.

I started in law firms and moved to corporate legal departments (in-house), negotiating strategic partnership agreements with major technology players, and spent years in compliance before focusing on investigations, due diligence and asset tracing.

In 2024 I co-founded ASM Investigação, a boutique firm based in Rio de Janeiro, where we work with companies in Brazil and abroad on investigations and advisory engagements.

I am also a member of the Valinor Intelligence analyst community, a UK-based network of OSINT specialists and ABA (Brazilian Lawyers Association).

I work fluently in English and Portuguese.

How I think

Data is not intelligence

A report with a hundred records can say less than three well-connected facts.

Sound decisions come from validating and contextualizing what was found, not from volume.

A company with no history, a partner who disappears from the records, assets that don't match declared income.

Often the most important finding is an absence.

Open sources are not a blank check. Every collection needs a purpose, a legal basis and proportionality, within the limits of Brazil's data protection law (LGPD). That is what makes a finding hold up when someone tries to challenge it.

What is missing is also information

Not everything public is fair game

An investigation serves a decision

Hiring, investing, granting credit, litigating.

Technically flawless work that helps no one decide is just a well-formatted document.

Selected writing on investigation, risk and compliance.

Writing

"No Records Found": the fragility of automated background checks and lessons from the fake doctors case in Brazil (Medium, June 2026)

More of my writing and talks, in Portuguese, are listed on the main page.

Where I can help

Investigations
Due diligence on companies and individuals, asset tracing and debtor investigations, background checks and third-party risk in Brazil or abroad.

Advisory
Risk mapping before entering the Brazilian market or closing a deal with a local partner. Design and review of third-party due diligence and KYC/KYS procedures. Internal investigation protocols that respect Brazilian data protection law (LGPD). Compliance programs built around real, cross-cutting risks rather than paperwork.