For police, courts and security services

What we do for you

We take care of the technical side. The legal assessment stays with you, the prosecutor or the court.

The chain of custody stays closed, even during a repair

A drive that ticks or no longer starts has to be made readable first. That takes an intervention: a head swap in the cleanroom, a new circuit board, sometimes reading the chips. That is exactly where cases weaken, because any undocumented step becomes a question from the other side.

With us the repair runs in the same chain as the examination. We take the device over sealed, with a handover document. Every action is recorded: what was done, by whom, when, and with which donor part. Once the device is readable, we make the forensic copy with write blocking, compute the hash values, and seal the original again. The examination happens only on the copy.

1. Handover Sealed handover with a document: who, when, which device, which seal.
2. Repair in the lab Cleanroom, donors from our own stock, X-ray where needed. Every action recorded.
3. Acquisition Forensic copy through a write blocker, hash values before and after (MD5 and SHA-256).
4. Return The original goes back sealed, with the report and the chain of custody.

All about our forensic method →

Drives, SSDs and phones as evidence

Most cases start with a device that no longer cooperates. Our equipment is built for that: nearly 20,000 donor drives, a Class 1 cleanroom, X-ray, rework and reballing for damaged boards and chips.

On a device with bad sectors we read in several passes and record, sector by sector, what could be read. That goes into the report too: not only what was found, but also what stayed unreadable. So you know exactly how complete the picture is.

Hard drive and SSD recovery →

Discretion, security and access

• cases from these services are handled by a limited group of staff
• separate room, own storage, no record in the ordinary case system
• non-disclosure agreement on request, or following your own template
• we work to the ISO 27001 standard; certification is under way
• everything happens in our own lab in Ypres: no transfer to third parties or abroad
• on request we come on site with a mobile cleanroom

Destruction of devices from closed cases

What must not be kept has to go for good. We destroy devices and provide a certificate per device, with type and serial number, usable in an audit.

Working together, urgency and rates

We work per case or under a standing arrangement, with fixed contacts and agreements on handover, turnaround and reporting. For urgent cases we work at priority, weekends included.

A forensic case is priced to the case after the intake. If the device has to be repaired first, our normal rates apply.

See the rates →