Digital forensics for lawyers and legal teams
Technical support when your case rests on digital material: acquisition of the media, analysis, preservation, traceability and a readable technical report.
In short. When a case rests on messages, files, online accounts or the content of a phone, the question is not only what they show, but how they were obtained and preserved. We provide technical support: documented acquisition, analysis and reporting, so that the material can be verified and challenged.
What we bring to a case
Acquisition of media
Copies of smartphones, computers, removable media, mailboxes and cloud workspaces, with SHA-256 hash and a handover record.
Targeted analysis
Locating what matters to the case: exchanges, files, connections, timeline, authenticity of a document or email.
Email analysis
Examination of full headers, domains, transmission paths and authentication mechanisms, to tell a genuine message from a forged or spoofed one.
Preservation and traceability
A documented chain of custody from handover to return, so every item can be traced.
Technical report
Findings kept separate from conclusions, method and limits set out, accessible language. In French, Dutch or English.
In what capacity
We can act at the request of a party, ahead of or in preparation for proceedings, as a party's technical adviser during an expert examination, or as an expert appointed by a court. These roles are never combined in the same case: we check for conflicts of interest before accepting an instruction.
Examinations are carried out by Jean-Pierre Heymans, entered in the National Register of Judicial Experts (Belgian FPS Justice) under number EXP2018610. The method is described on the IT forensic expertise page.
What we do not do
- Guarantee the admissibility or weight of any item: those are matters for the court.
- Examine a third party's device or account without a legal basis.
- Draw legal conclusions: we establish technical facts; characterisation is yours.
Common situations
Online harassment and threats, identity theft, payment fraud, an employee leaving with data, commercial disputes resting on electronic exchanges, challenges to a message's authenticity. For your private clients, the individuals page covers the most common situations; our digital evidence guide can be passed on to them for preservation in the meantime.
Frequently asked questions
Can you act urgently to capture material?
Yes. When material may disappear — online logs, published content, ephemeral messages — we can carry out a record or an acquisition quickly. Contact us describing the urgency.
Can the report be written in Dutch?
Yes. Reports can be written in French, Dutch or English.
Can you be appointed as expert in a case where you have already advised a party?
No. A court-appointed expert must be independent of the parties; an earlier role as technical adviser in the same case rules it out.
A case that rests on digital material?
First conversation free and confidential. We clarify what can be established, in what capacity and at what cost.