Every contact
leaves a trace.

We routinely structure engagements to operate within legal professional privilege frameworks. Where instructed by external counsel, our work can be conducted as part of a privileged investigation, with communications and findings directed through the instructing solicitor. We address cross‑border privilege considerations — including differences between common law and civil law jurisdictions — at the outset of every engagement and can advise on appropriate structuring before any forensic work commences.

Our methodology is designed from the outset for evidentiary defensibility. We follow documented, reproducible procedures aligned with internationally recognised forensic standards. All acquisitions are cryptographically verified, chain‑of‑custody records are maintained contemporaneously, and our expert reports are structured to comply with the requirements of the Hong Kong Rules of the High Court and the procedural rules of major arbitral institutions including HKIAC, SIAC and ICC.

Yes. Our experts are available for court‑appointed and tribunal‑appointed roles, providing impartial forensic analysis to assist the Court or tribunal rather than any party. In these appointments we adhere strictly to the overriding duty owed to the Court, delivering objective, transparent and technically robust opinions. We are experienced in the procedural requirements of the Hong Kong courts and the major international arbitral institutions.

Data privacy and cross‑border transfer obligations are assessed at the outset of every engagement. We are familiar with the Personal Data (Privacy) Ordinance (PDPO) and its application to forensic investigations, as well as the data governance frameworks of mainland China, Singapore, Japan and Australia. Where evidence spans multiple jurisdictions, we work with instructing counsel to ensure that collection, transfer and analysis procedures comply with applicable regulatory requirements.

We maintain rapid‑response capability for urgent preservation matters. Upon instruction, our team can deploy within 24 to 48 hours for on‑site preservation, or commence remote acquisition where technically feasible. We provide litigation hold advisory services, assist with custodian notification protocols and produce a documented preservation record suitable for disclosure. All preservation work is conducted with the same evidentiary rigour applied to full forensic examinations.

Yes. We regularly provide rebuttal expert analysis, reviewing opposing expert reports for methodological errors, unsupported conclusions and procedural deficiencies. We can advise instructing counsel on lines of cross‑examination, prepare detailed critiques of opposing methodology, and provide expert evidence in response. Our rebuttal work is conducted to the same standard of independence and rigour as our primary expert engagements.

Confidentiality is fundamental to our practice. We do not disclose client identities, matter details or engagement outcomes. A non‑disclosure agreement is available before any substantive discussion takes place. Evidence is stored on isolated, encrypted systems with access restricted to the engagement team. We do not publish case studies, testimonials or named references. References are available upon request to qualified counsel, subject to the express consent of the referring party.

In many cases, yes. Deleted files often remain recoverable through file carving, volume shadow copy examination and unallocated space analysis. Encrypted data may be accessible through key recovery, password analysis or examination of decrypted artefacts left in memory or temporary files. Where data has been deliberately destroyed, the forensic evidence of that destruction — wiping tool artefacts, log tampering, timestamp manipulation — can itself constitute significant evidence of conduct relevant to proceedings.

We accept instructions from external solicitors, in‑house counsel and institutional clients directly. Engagements typically commence with a confidential preliminary consultation to understand the matter, assess the forensic scope and identify any jurisdictional or privilege considerations. We provide a structured engagement letter setting out scope, methodology, deliverables and fees before work commences. Throughout the engagement, we maintain regular communication with instructing counsel and can attend conferences, hearings and strategy meetings as required.

Our examination capability spans computers and servers (Windows, macOS, Linux), mobile devices (iOS and Android, including WeChat, Signal, Telegram, LINE and DingTalk), cloud and enterprise platforms (Microsoft 365, Google Workspace, Azure, AWS), network and infrastructure data (PCAP, SIEM, firewall logs), financial and blockchain systems (cryptocurrency wallets, ERP platforms, digital payment records) and drone and UAV systems (DJI, Autel and Parrot flight logs, telemetry and onboard storage).