01
What does a cyber forensic company actually do?
It recovers, examines and documents digital evidence in a way that stands up to legal or regulatory scrutiny. That means acquiring data from devices and accounts without altering it, analysing what happened and when, and producing a report that another examiner could verify independently.
02
Will your report be accepted in an Indian court?
Our reports are prepared to meet evidentiary requirements, including the certificate contemplated under Section 65B of the Indian Evidence Act and its successor provisions, with hash verification and a documented chain of custody. Admissibility is ultimately decided by the court, but the report is written so that nothing in our handling gives the other side a reason to challenge it.
03
Can you recover data that was deleted or from a device that is damaged?
Very often, yes. Deleted files usually remain recoverable until the space is overwritten, and chat databases retain records long after a user deletes a conversation. Physically damaged media and locked handsets depend on the specific fault and model — we assess the device first and tell you honestly what is recoverable before you commit to the work.
04
What should we do immediately after we suspect an incident?
Stop using the device and do not let anyone else use it. Do not switch it on, do not run antivirus, do not let IT reimage it, and do not attempt recovery with consumer software — each of those overwrites evidence. Note who had access and when, preserve relevant logs and CCTV before they rotate, and call us. Preservation advice over the phone costs you nothing.
05
How long does a forensic examination take?
A single phone or laptop with a focused question is typically a few working days. Multi-device matters, large mailboxes, video enhancement or multi-year transaction analysis run longer. We give you a timeline after scoping, and urgent preservation is always done first even when the analysis will take weeks.
06
Is our data kept confidential?
Yes. Every engagement runs under an NDA, case data is stored encrypted with access limited to the assigned examiners, and our handling is governed by our ISO 27001:2022 certified information security processes. Data is returned or securely destroyed at the end of the agreed retention period.
07
Do you handle cases outside Navi Mumbai?
Yes. The lab is in Vashi and we work across Mumbai, Thane and Pune regularly, with travel for on-site acquisition elsewhere in India. We also take on matters outside India, handled remotely or on site as the case requires. Devices can be couriered under a documented chain of custody where travel is not practical.
08
How much does a cyber forensic investigation cost?
It depends on the number of devices, the volume of data and whether expert testimony is needed. We scope the matter first and quote a fixed price for a defined scope rather than billing open-ended hours. The initial consultation to work out what you need is free.