How every engagement starts.

  1. A first conversation

    We tell you honestly whether we can help. Sometimes the answer is no, and we say so.

  2. A written scope and estimate

    What we'll examine, a price range, and what it can't show, agreed before any work.

  3. Preserve and analyze

    Verified copies and a logged chain of custody. We work only on copies; originals stay untouched.

  4. The report

    A plain-English summary, a technical appendix, and the underlying data. Court testimony goes through a credentialed partner examiner.

What you get back.

Finding · Active use

Device in use from 11 PM to 1 AM

Traces back to

  • Messages database
  • Photo metadata
  • App activity log

Verified copy · SHA-256 match

Mediation brief

Bottom line

  • 5Settled by the records
  • 3Still disputed
  • 2Records can't decide

10 disputed points reviewed

Examination report

Answering the questions

  • Was the phone in use?Yes, throughout the window.
  • Were deleted messages recoverable?Yes. 52 recovered.
  • Where was the phone?Within one consistent area.

SummaryTechnical appendixData

Cell phone forensics for criminal defense

See every service
  • Evidence preservation, with verified copies and a chain-of-custody log
  • Phone evidence from iPhone and Android
  • Computer and drive evidence
  • Online account and cloud records, collected with the account holder's permission or through legal process your attorney obtains
  • Public-source research on websites, numbers, usernames and addresses
  • Device compromise checks
  • Message, screenshot and photo authentication
  • Audio and video review (formal authenticity opinions are signed by a credentialed partner examiner)
  • Transcript and language analysis
  • Independent review of the other side's forensic work
  • Evidence indexing and contradiction mapping
  • Visual evidence briefs: timelines, exhibits, and the data as a spreadsheet
  • Reports, funding declarations and testimony support (testimony through a credentialed partner examiner)

For defense firms · by application

Inside the workspace.

Drop in discovery.

Every file is fingerprinted the moment it arrives.

Search every page.

Each hit shows where it came from, down to the Bates number.

A report you can hand over.

One self-contained file. Every timeline entry cites its source.

See the work before you call.

Defense examination reportA fictional phone examination, from scope to limits. Mediation evidence briefA fictional supply dispute: what the records settle, what's still open.

Why the work holds up

  • Documented chain of custody from intake
  • Evidence imaged and SHA-256 hash-verified; analysis on a verified copy
  • Repeatable methods on open-source tools any qualified examiner can re-run
  • Two-part reports: plain-English summary and technical appendix
  • Limits and negative findings written into every report
  • Testimony through a credentialed partner examiner

Independent, and accountable to the evidence.

Offices in Talent, Oregon (Rogue Valley) and Kahului, Hawaii (Maui). Remote engagements; on-site by arrangement.

We report findings that don't help whoever hired us.

Court testimony is given through a credentialed partner examiner.

What attorneys say.

Something else? Ask us directly.

Bring us in early: the sooner evidence is preserved, the more we can do with it.

This is about

A sentence or two is enough. Leave out client names and privileged details.

We use your email to reply. This site uses Google Analytics and Google Ads, which may receive a securely hashed copy of your email to measure this form. Privacy policy.