PHASE_01
Triage · scoping
A short call to confirm what's suspected, which evidence sources exist, the legal basis to investigate, and a fixed quote for the full case. No surprises.
↳ 90 MIN> Insider data theft, payment fraud, spyware, a device that saw something it shouldn't have. Acta's DFIR unit acquires it, proves what happened, and packages it to hold up — in a boardroom, a regulator's inbox, or a courtroom. Court-ready. Chain of custody intact.
// Start with a fixed-price triage to scope your case, then run the full investigation — quoted to what the evidence demands. Fixed-price items check out securely online. rate card >_
// Fixed-price triage items check out securely online. Investigations are quoted to what the evidence demands — book the category's triage to scope. Chain of custody opens at acquisition.
// Insider theft, fraud, spyware, or a device that needs preserving? Open a secure chat below — no app, no account. We answer within a few hours, typically under 1 hour — including weekends and holidays.
// Every case follows the same forensic backbone — scoped to your matter, your regulator and, where it lands, the court.
A short call to confirm what's suspected, which evidence sources exist, the legal basis to investigate, and a fixed quote for the full case. No surprises.
↳ 90 MINBit-for-bit imaging of devices, mailboxes and logs, hashed and write-blocked. Nothing analysed on originals; chain of custody opens here.
↳ 24–48 HWe reconstruct what happened and when — exfiltration timelines, access patterns, artefacts — separating what the evidence proves from what it merely suggests.
↳ 1–3 WEEKSA report for two audiences: a plain-language account for decision-makers, and an exhibit-referenced technical annex built to survive scrutiny.
↳ 1 WEEKWhere it goes further: regulator packaging, law-enforcement referral, expert witness statements and deposition or courtroom testimony.
↳ AS NEEDED// The examiner who images the device is the one who signs the report — and the one who takes the stand. No handoffs, no offshore lab.
// A short list of things we believe — written down so we can be held to them.
We report what the evidence proves — not what the client hopes. Every finding traces to a hashed exhibit and an unbroken chain of custody. If it makes the report, one of us will defend it under cross-examination.
// Book a fixed-price triage and we'll tell you what the evidence can still show — and what the full investigation would cost. No obligation to go further.