Data Forensics & System-State Preservation Labs
Contact and case inquiry

Discuss a forensic matter.

Tell us what happened, what system or records are involved, and what you need to understand. That is enough to start.

The initial inquiry is deliberately brief. It exists so a person can read the matter, judge whether AuditTrace Labs is the right place for it, and reply with a sensible next step. No evidence upload is accepted through this website, and none is needed at this stage.

Commercial forensic work and forensic access and assistance inquiries both arrive here. Use the same form for either. The description you write matters more than the category you choose.

Useful in a first message

  • What happened, in plain language
  • Roughly when it happened, or when it was noticed
  • The kind of system, device, or records involved
  • What still exists, and what may already be gone
  • What you need to understand or demonstrate

General description only · no credentials · no evidence files

Inquiry

Send a short description of the matter.

Four fields are required. The others only help us reply in the way you prefer.

Please do not send sensitive material in this first message

Do not send passwords, authentication credentials, private keys, access tokens, or sensitive evidence through this form. Describe the matter in general terms instead — that is all this stage requires.

If the matter is appropriate for further review, AuditTrace Labs can provide instructions for the next step, including how any relevant material should be handled and exchanged.

A few sentences is plenty. What happened, what is involved, and what you need to understand.

After you send it

A person reads the inquiry and replies.

  1. Confirmation appears here, not in your inbox

    When the inquiry is received, this page says so. There is no automated confirmation email — the on-page confirmation is the confirmation. If it does not appear, treat the message as unsent and write to us directly instead.

  2. A person reads it, not an automated filter

    A person reads what you wrote and replies using the contact details you provided. Inquiries are not sorted into decisions automatically, and no answer is generated on our behalf without human review.

  3. Scope comes before work

    If the matter is one AuditTrace Labs can help with, the reply sets out what would come next: which evidence appears to matter, what authorization is required, and how material should be exchanged. Scope and authorization are agreed before any work begins.

An inquiry is not an engagement

Sending this form does not create a client relationship and does not mean a matter has been accepted. Every matter is different, and some fall outside what this laboratory should take on. An inquiry does not guarantee acceptance.

If you would rather not use a form

Write to contact@audittracelabs.com with the same kind of description. The same caution applies to email: keep credentials and sensitive evidence out of a first message.

Email is the only contact channel AuditTrace Labs publishes.

Conditions of the work

Two points that are settled before anything else.

Authorization comes before access

Work can only involve systems, accounts, devices, records, or evidence for which appropriate authorization exists. Where that authorization is unclear, establishing it is the first task rather than a formality to be worked around.

Where a matter proceeds, retention scope is agreed explicitly and in writing. Reviewability long after an event is a design goal, not a promise, and it holds only where the available source evidence and chosen retention scope support it. Evidence that no longer exists cannot be recreated.

Bounded scope · documented authorization · human-gated review

What this laboratory is not

AuditTrace Labs is a private data forensics and system-state preservation laboratory. It is not a law-enforcement agency, a law firm, a court, or an emergency service, and nothing on this page is legal advice.

If a situation involves immediate danger, an ongoing crime, or any other emergency, please contact the appropriate authorities first. A forensic inquiry can follow afterwards; it is not a substitute for that step.

Questions about rights, obligations, or legal strategy belong with a qualified attorney.

We would rather state the weaker true thing than the stronger unsupported one.

That applies to this page and to anything we write in a report. Where evidence does not support a conclusion, the record says so. Separating observed fact from inference — and both from evidence that is simply missing — is part of the work, not a caveat added at the end.