Add Nimistu to company/public records resources

[andrikoolme]

I would like to suggest Nimistu.ee as an Estonia-focused company/public-records resource for the OSINT Framework.

Suggested area:

• Public Records
• Business Records
• Company Research
• Estonia / country-specific resources

Suggested resource:
Nimistu — https://nimistu.ee/en

Nimistu is an independent, non-profit public-registry aggregator for Estonian-linked entities, properties, and IP. It consolidates 70+ official Estonian and international data sources — commercial register, tax authority, sanctions lists, procurement records, court rulings, politically exposed persons, beneficial ownership, labor and environmental enforcement, EU lobby register, and others — into a single source-attributed view with daily refresh. Every data point links back to its original source with a timestamp.

Useful links:

• Website/search: https://nimistu.ee/en
• Sources page (all 70+ data sources with status and freshness): https://nimistu.ee/en/sources
• Analytical views: https://nimistu.ee/en/views
• For journalists: https://nimistu.ee/en/press
• License (CC-BY-SA 4.0): https://nimistu.ee/en/license
• About: https://nimistu.ee/en/about

Operated by Nimistu MTÜ, a registered Estonian non-profit. Service is free, ad-free, no login required, no paid tier.

Disclosure: related-party suggestion from the Nimistu project. If a PR is preferred, we can prepare one in line with the repository format.

Important caveat: Nimistu is an independent informational aggregator. It is not the official Estonian commercial register (äriregister) and does not replace official certificates or registry extracts. It aggregates and presents data from official sources with full attribution.

[sophymarine]

The Äriregister locked down bulk public access to Estonian UBO data right after the CJEU C-601/20 ruling. Because of this, Nimistu might be serving stale, cached graphs from pre-2022 dumps. Or they are scraping basic public profiles. Either way, relying on them blindly for KYB onboarding is risky. For statutory compliance, we now need a documented legitimate interest justification under AMLD5 to pull live beneficial ownership from the official registry. Adding a warning note about this gap to our directory is a smart move. It flags when analysts need to jump over to the live registry portal to run a compliant, manual lookup.

[andrikoolme]

The Äriregister locked down bulk public access to Estonian UBO data right after the CJEU C-601/20 ruling. Because of this, Nimistu might be serving stale, cached graphs from pre-2022 dumps. Or they are scraping basic public profiles. Either way, relying on them blindly for KYB onboarding is risky. For statutory compliance, we now need a documented legitimate interest justification under AMLD5 to pull live beneficial ownership from the official registry. Adding a warning note about this gap to our directory is a smart move. It flags when analysts need to jump over to the live registry portal to run a compliant, manual lookup.

Regarding the data, nimistu collects UBO (tegelikud kasusaajad) information daily from RIK's official open-data endpoint at avaandmed.ariregister.rik.ee/sites/default/files/avaandmed/ettevotja_rekvisiidid__kasusaajad.json.zip. RIK continues to provide this file publicly and without authentication, which is Estonia's approach following C-601/20. This means the data is not an old pre-2022 dump, but is updated every 24 hours with what RIK currently publishes.

While the ruling removed AMLD5 Article 1(15)(c)'s requirement for universal public access "as of right," it did not stop member states from making UBO data public for other legal reasons, like national transparency laws, journalism, or public-interest exceptions. Estonia's data protection authority (AKI) has not said this is not allowed, and no Estonian aggregator has been told to remove UBO data. Nimistu and commercial aggregators use the same legal basis, republishing open data from RIK.

For the KYB use case, you are right that UBO compliance lookups should be performed using the official registry and proper documentation of legitimate interest. This matches nimistu's role as an investigative and research aggregator, not a source for statutory compliance.