Services
Internal Investigations
& Litigation Support
When something in your company does not add up, we help establish what really happened. We preserve and analyse digital evidence and prepare material for the next internal or legal steps.
Embezzlement, an information leak, a conflict of interest or an anonymous tip-off. Most companies face a situation like this for the first time – and it is precisely the first steps that can decide what can be discovered and proven. We conduct investigations discreetly, systematically and with possible further legal action in mind. If a suspicion turns into a dispute or criminal proceedings, we provide technical and forensic support throughout. We work for companies and law firms.
When to contact us
- You suspect embezzlement, fraud or other conduct harming the company
- Purchases, contracts or payments show suspicious patterns or connections
- You suspect a conflict of interest or someone acting in another company’s favour
- An employee has left – and possibly taken data, know-how or customers with them
- You have received an anonymous report or allegation that needs independent review
- You need to preserve electronic evidence in good time for possible legal action
- You need to establish what really happened and back the conclusions with digital evidence
- Your law firm needs technical and forensic support in a dispute
From investigation to next steps
Case investigation
We design the investigation plan, preserve and analyse the relevant data and continuously evaluate each finding in the context of the case.
Documented findings
We document the findings, put them into context and prepare a clear deliverable, including the material our conclusions are based on.
Litigation support
If the case proceeds down the legal route, we provide the law firm with technical and forensic assistance. Where needed, we also prepare an expert witness report.
From our casework
A group of employees left a company and shortly afterwards began operating in a newly founded competing business. The client needed to establish whether they had handled company data before leaving and whether digital traces could show when the activities connected with their departure began.
We preserved and analysed data from their work devices and other available sources. We focused on file activity, communications and other digital traces from which a timeline of events could be assembled.
The analysis made it possible to determine what data had been handled and when these activities took place, and to place the individual events in the wider context of the employees‘ departure. We presented the results of the investigation in expert witness reports, which served as the basis for the client’s further legal action.
Frequently asked questions
Will employees find out about the investigation?
Not necessarily. We tailor the investigation to the specific situation and keep the circle of people involved as small as possible. In some cases, a significant part of the analysis can be carried out without the employees concerned being informed in advance. It always depends, however, on the circumstances of the case and the employer’s legal options.
What is an employer allowed to examine?
The scope of the investigation depends on the specific situation, the nature of the devices and data, and the legal basis for processing them. We therefore focus on data relevant to the case at hand and, where appropriate, consult the scope of the investigation with the client’s legal counsel.
How quickly can you start?
In urgent cases we aim to start as soon as possible. Speed can be particularly important where there is a risk of data being deleted or overwritten, of further employees leaving, or of the undesirable conduct continuing.
What can digital traces reveal?
Depending on the available data, it is possible to establish, for example, which files a user worked with, whether data was copied or transferred, which devices were connected, or how individual events relate to each other in time. Within the legally permissible scope, the investigation can also include an analysis of work communications. The specific possibilities always depend on the device, the system, the available data and the circumstances of the case.
Will the findings be usable in court?
We preserve data and document the procedure with its possible further use in legal proceedings in mind. If the case requires a formal expert deliverable, we can also present the results as an expert witness report. The procedural admissibility of specific evidence is, however, decided by the competent authority or court.
What if the suspicion is not confirmed?
That too is a relevant outcome of the investigation. Our job is not to confirm the original suspicion, but to objectively evaluate the available digital traces and describe what can and cannot be inferred from them.
How long does an investigation take and how much does it cost?
It depends on the number of devices and data sources, the volume of data and the questions that need to be answered. After an initial review of the case we will propose the scope of the investigation and specify the expected time and cost.
Dominik Novák
consultant
The first consultation is free and confidential.
Not sure whether this is a case for us?
Call us – the first consultation is free, confidential and comes with no obligation.