This scenario is illustrative. The names, numbers and files are synthetic and describe how the workflow runs, not a real company.
The situation
A manufacturer's internal audit team is investigating why procurement costs at one plant run well above the others. Five suppliers bid against each other for the same contracts, and the same few always win in rotation.
How the audit team works it in Anvexer
The team opens a case and uploads the vendor master data, two years of invoices and payment records, and the bank account details each vendor registered. They name the five suppliers as subjects.
1. One office, five companies
Anvexer reads the vendor master and company records. Three of the five suppliers give the same registered office, and the other two share a second address a few streets away.
2. One signatory
The bank account details the vendors registered list the same authorised signatory on accounts of four of the five suppliers.
3. The link to the plant
A director of two of the suppliers shares a surname with a senior procurement manager at the plant. A surname proves nothing, so Anvexer does not treat it as a match. What it does find is that the director's residential address in the company filings is the same as the address in the manager's records, and it sends the pair to the review screen for the auditor to judge.
4. Testing the theory, and the innocent explanation
The auditor writes down the hypothesis "the five suppliers are not independent of each other". Anvexer rates it strongly supported, and lists the alternative explanation that the shared office could be a co-working space or a company-secretarial firm's address used by unrelated clients, with the evidence that would rule it in or out.
The result
The audit committee gets a cited file showing a shared office, a common bank signatory and a family link between the suppliers and a procurement manager. What happens next, a deeper forensic review, a disciplinary inquiry or a police complaint, is the company's decision, taken with its legal advisers.
Researching individuals needs a lawful basis under the Digital Personal Data Protection Act, 2023; that stays the company's responsibility.