Compliance and confidentiality
We work with some of the most sensitive data there is. The rules below apply to every request, whoever the applicant.
Basis: the owner's consent
We analyse a device only with the written consent of its owner or legal representative. Without consent, we don't accept the device.
Data protection (GDPR)
We process data under Regulation (EU) 2016/679. Details are in the Privacy policy.
Retention and erasure
Device content is kept only for the duration of the analysis. Working copies are erased at handover, with written confirmation, unless otherwise agreed in writing.
No online transfer
Analysis happens in the laboratory. Device content isn't uploaded to the cloud and isn't sent to third parties.
Confidentiality
Our staff are bound by confidentiality. For organisations we sign a separate confidentiality agreement on request.
Limits of the analysis
Our report is a technical report. It is not a court-appointed expert opinion and doesn't replace one.
What we don't do
- We don't analyse devices without the consent of the owner or legal representative.
- We don't bypass passcodes or use methods that change the device.
- We don't keep copies of the content after handover, unless asked to in writing.
- We don't give third parties access to the data or use it for anything other than the agreed purpose.
The full terms of engagement are in the Terms and conditions.