Why method matters as much as content
A plain screenshot is easy to contest: it may have been edited, its date cannot be verified, its origin is uncertain. Solid digital evidence rests on three qualities: authenticity, integrity and traceability — knowing where it comes from, proving it was not altered, and documenting who handled it.
What we put in place
Complete, time-stamped captures
Web pages, posts, conversations, with address, collection date and time.
Cryptographic hashes
Each file gets a hash (SHA-256): any later modification is detectable.
Working copies
We analyse copies and keep the original intact, never altering the source.
Chain-of-custody log
Who collected what, when, how and where it is stored: everything is recorded.
Encrypted storage
Items are stored encrypted with restricted access.
Readable export
An organised file that a lawyer, insurer or the authorities can use.
Types of items we handle
- Web pages and social media posts
- E-mails, with their technical headers
- Chat conversations and exchanged files
- Server, router or application connection logs
- Contents of a computer or phone (with the owner's consent)
- Transaction histories and digital receipts
What to do if you are a victim
- Do not reply and do not delete anything.
- Note the date and time of every event.
- Call us before trying to « clean » a device: it could erase traces.
- Keep originals (e-mails in their original format, files, proofs of payment).
Our guide online scams: the ten first moves details the process step by step.


