METHODOLOGY & STANDARDS
How We Examine Evidence
From intake to written report.
Every forensic matter is handled under strict evidentiary protocols: objective analysis, transparent documentation, and secure chain of custody.
02 — INSIDE AN EXAMINATION
Light reveals.
Angled, ultraviolet and infrared light bring out indentations and alterations in documents.
Points are measured.
Every point of comparison is marked, measured and recorded, so the reasoning can be checked by anyone.
Exhibits are sealed.
Digital exhibits are hashed and logged, and every exhibit stays on a chain-of-custody record.
FOUR PHASES
The Examination Lifecycle
Intake & Chain of Custody
Each exhibit is photographed when it arrives, given a case reference and entered on the chain-of-custody record. Digital exhibits are hashed at intake.
Evidence Acquisition & Preservation
Digital media is imaged using hardware write-blocked imaging to preserve original state bit-for-bit. Physical documents and latent print surfaces are preserved in protective storage.
Scientific Examination & Measurement
Exhibits are examined methodically: documents under angled, ultraviolet and infrared light, handwriting by magnified stroke comparison, devices by digital recovery, with each point recorded.
Reporting & Legal Testimony
Findings are compiled into an objective report in plain language detailing methods and observations. Our examiners provide expert testimony when instructed by counsel or the court.
04 — CONFIDENTIALITY
Your matter stays
your matter.
NDA on request
We can sign a non-disclosure agreement before you share sensitive case material.
Chain of custody
Every exhibit we receive is logged and kept on a chain-of-custody record.
Secure transfer
Ask us for a secure transfer method first. Ordinary email is not a safe way to send sensitive files.
Data Protection Act 2019
Personal data is handled in line with Kenya's Data Protection Act 2019.
Clear terms before any work begins. Every engagement starts with an estimate. For data recovery: no recovery, no fee; terms and conditions apply and are stated transparently before work begins.
Request an estimate ›05 — TECHNOLOGY
Technology we work with.
Trademarks and logos belong to their respective owners. Listing a tool means we use it in our work; it does not imply partnership or endorsement. AI tools are never used on client evidence without the client's consent.
FREQUENTLY ASKED QUESTIONS
Methodology & Process Questions
How is chain of custody documented during an examination?
Every exhibit we receive is logged and kept on a chain-of-custody record; digital exhibits are hashed.
Can physical evidence and digital devices be examined together?
Yes. We plan the order of examinations so that one does not compromise another.
How do we share evidence securely with your examiners?
We advise requesting an encrypted transfer link or delivering physical exhibits to our Nairobi office by prior appointment. WhatsApp messages are end-to-end encrypted; standard email is not.
How long does an examination take?
It depends on the case; we give an estimate before work begins. For data recovery, we aim to give an initial assessment within 6 hours and a free diagnosis within 24 hours, depending on workload and the condition of the device.
Do you work with clients outside Nairobi?
Yes. We serve clients across East Africa and beyond, and remote consultations are available on request.
More on how we work
Start with a
confidential conversation.
View Park Towers, 20th Floor, Nairobi
Monday–Friday 08:30–17:00 · Saturday 10:00–14:00
Remote consultations available on request.
Please don't send case details or evidence until we've agreed a secure way to receive them.