From pixels to paper

Ideally, as early as possible. Early advice can help preserve evidence, avoid accidental alteration or loss, and determine whether forensic examination is likely to assist your matter. We offer obligation-free initial discussions and will be upfront if we believe an examination is unlikely to provide meaningful evidential value.

The cost depends on the type and volume of evidence, the questions to be addressed, the complexity of the examination and the level of reporting required. After an initial discussion and review of the available information, we can provide an estimate or quotation before commencing substantive work.

Timeframes vary according to the complexity and urgency of the matter, the volume and condition of the evidence, and the type of examination required. Straightforward matters may be completed within 1-2 weeks, while complex examinations can take considerably longer. If you have a court date or other deadline, let us know at the outset so we can advise what is achievable.

Our experts are independent and our findings are determined by the evidence, not by the outcome sought by the client. Where possible, we assess the suitability of a matter before undertaking substantial examination work. If work has already been undertaken, fees will generally apply to that work regardless of whether the findings support your case. We will keep you informed throughout the examination and will advise as early as practical if further examination is unlikely to produce meaningful results.

Yes. We can independently review forensic evidence, reports, methodologies and conclusions produced by another examiner or organisation. This may help identify limitations, areas requiring clarification or alternative interpretations of the evidence.

Yes. ForenSys specialises in multidisciplinary cases which may consider digital evidence alongside documents, images, video and identity-related evidence, allowing individual findings to be assessed within the broader evidential context.

In many cases, yes. Depending on the type of evidence and examination required, our experts can conduct examinations, evidence collection and forensic acquisition at client premises or other locations. Digital forensic examinations can typically be performed remotely, however evidence collection may need to occur off site. Examinations of physical documents typically requires us to examine the original item in our laboratory.

A digital forensic examination involves the identification, preservation, recovery and analysis of digital evidence from sources such as computers, mobile devices, storage media, email, cloud services and other systems. The process is tailored to the questions being investigated and may include recovering files, examining metadata, establishing timelines and analysing user or system activity.

Preserve the device or data in its current state wherever possible, including avoiding turning it off unless there is suspicion of remote tampering. Avoid deleting files, reinstalling software, resetting devices or attempting your own recovery, as these actions can alter or overwrite evidence. Some important information may be time limited and needs prompt action before it is automatically deleted or overwritten. Contact us early and provide as much context as possible about what happened, when it occurred and what you need to establish.

Forensic document examination assesses the authenticity, origin or integrity of a document. Depending on the matter, this may include examination of handwriting and signatures, printing processes, inks, security features, alterations, counterfeits and other physical or visual characteristics.

Handle original documents as little as possible and avoid writing on, folding, stapling, laminating or otherwise altering them. Store each document securely in suitable protective packaging such as a durable plastic sleeve. When posting items do not write on the envelope with the evidence inside as this may apply impressions to the document. Contact us before sending original evidence so we can provide handling, packaging and delivery instructions appropriate to the material.

Yes. Digital copies can often be used for an initial assessment and, in some matters, may provide sufficient information for a useful examination. If provided directly from the source, the digital information attached to the file may also be of value to an examination. However, PDFs, photographs and scans can omit or alter important characteristics, so an examination based on copies may be more limited than one conducted on the original document. We can advise whether the material available is suitable.

Where possible, provide the original questioned document together with appropriate comparison material. For handwriting or signature matters, genuine comparison samples must also be provided – generally including requested samples, and course of business signatures produced around a similar time and under comparable circumstances. This could include contracts, wills, cheques or other signed documents. The volume required varies between writers, but typically 15-20 examples is a good benchmark.

We can examine photographs and video to assess their authenticity and evidential reliability. This may include analysis of file structure, metadata, visual content, compression and other characteristics for indicators of editing, manipulation or inconsistency. The strength of any conclusion will depend on the material available, particularly whether the original file is available.

Sometimes, yes. Enhancement techniques may improve the visibility or interpretation of relevant features in CCTV footage, including people, objects, vehicles or events. Enhancement cannot create detail that was never captured, however, and the results depend heavily on the quality of the original recording.

We can examine digital imagery and video for indicators of manipulation, fabrication and potential AI generation. These examinations may combine technical, metadata and visual analysis. Because generative technologies continue to evolve, it may not always be possible to reach a definitive conclusion, and we will clearly explain the strength and limitations of our findings.