PHASE_01
Triage · scoping
A short call to confirm what's suspected, which evidence sources exist, the legal basis to investigate, and a fixed quote for the full case. No surprises.
↳ 90 MIN> Insider data theft, payment fraud, spyware, a device that saw something it shouldn't have. Acta's DFIR unit acquires it, proves what happened, and packages it to hold up, in a boardroom, a regulator's inbox, or a courtroom. Court-ready. Chain of custody intact.
// Start with a fixed-price triage to scope your case, then run the full investigation, quoted to what the evidence demands. Fixed-price items check out securely online. rate card >_
// Fixed-price triage items check out securely online. Investigations are quoted to what the evidence demands. Book the category's triage to scope. Chain of custody opens at acquisition.
// Insider theft, fraud, spyware, or a device that needs preserving? Open a secure chat below: no app, no account. We answer within a few hours, typically under 1 hour, including weekends and holidays.
// Every case follows the same forensic backbone, scoped to your matter, your regulator and, where it lands, the court.
A short call to confirm what's suspected, which evidence sources exist, the legal basis to investigate, and a fixed quote for the full case. No surprises.
↳ 90 MINBit-for-bit imaging of devices, mailboxes and logs, hashed and write-blocked. Nothing analysed on originals; chain of custody opens here.
↳ 24–48 HWe reconstruct what happened and when (exfiltration timelines, access patterns, artefacts), separating what the evidence proves from what it merely suggests.
↳ 1–3 WEEKSA report for two audiences: a plain-language account for decision-makers, and an exhibit-referenced technical annex built to survive scrutiny.
↳ 1 WEEKWhere it goes further: regulator packaging, law-enforcement referral, expert witness statements and deposition or courtroom testimony.
↳ AS NEEDED// The examiner who images the device is the one who signs the report, and the one who takes the stand. No handoffs, no offshore lab.
// A short list of things we believe, written down so we can be held to them.
We report what the evidence proves, not what the client hopes. Every finding traces to a hashed exhibit and an unbroken chain of custody. If it makes the report, one of us will defend it under cross-examination.
// Book a fixed-price triage and we'll tell you what the evidence can still show, and what the full investigation would cost. No obligation to go further.