Evidence Acquisition & Preservation
Forensically sound collection, hashing and chain of custody for digital evidence.
Digital evidence is only useful if its integrity can be shown. We acquire data from devices, media and accounts using forensic methods, verify it with cryptographic hashes and document the chain of custody, so the evidence can be relied on later, whether or not full analysis is needed now.
Who it’s for
- Legal teams preparing for litigation
- Employers preserving evidence before an inquiry
- Anyone who needs evidence secured before it is lost
What we examine
- Phones, computers and storage media
- E-mail and cloud accounts, with authority
- Media and document collections
How an engagement works
Plan
We identify the sources and the order of collection.
Acquire
Forensic acquisition with write protection where applicable.
Verify
Hash verification and documentation.
Store or hand over
Secure storage or handover with a chain-of-custody record.
What you need
- Lawful authority over each evidence source
What you receive
- Forensic copies
- Hash verification record
- Chain-of-custody documentation
Limitations. Preservation captures what exists at the time of acquisition. It does not restore data that has already been deleted or overwritten.
Please don’t upload evidence or send passwords through this website. Once we’ve discussed your matter, we’ll arrange a secure handover with a documented chain of custody. How evidence is handled.