Our process
Our process, from first call to expert report
Every examination follows the same documented workflow, from a free first discussion to an independent report the court can rely on. The evidence is hash-verified on receipt, every step is logged, and the findings are peer reviewed before they are reported.
Expert Witness Code of Conduct
Reports prepared in line with court rules on expert evidence
SWGDE best practice
Recognised methods for digital and multimedia evidence
Repeatable methods
Documented workflow that another examiner can reproduce
Hash-verified custody
SHA-256 recorded on receipt and at every hand-off
Strictly confidential
Encrypted transfer and secure storage of evidence
Overview
What happens when you instruct us?
You start with a free, confidential discussion about the footage, the questions it needs to answer and your deadline. We then confirm the scope and fee in writing, arrange a secure transfer, and examine a verified copy of the evidence using documented, repeatable methods.
Nothing is done to the original. We record a hash value the moment the evidence arrives, keep a log of everyone who handles it, and carry out every examination on a working copy. Each processing step is recorded with the tool and settings used, so another examiner could repeat the work and reach the same result. A second examiner reviews the methods and findings before anything is reported. The result is an independent expert report that separates what the evidence shows from what it cannot show, ready for the court and for cross-examination.
The seven stages
From enquiry to expert report, step by step
Each stage has a clear output, so you always know where the matter stands and what happens next.
Stage 01
Initial discussion
A free, confidential conversation about the footage you hold, the questions it needs to answer and your deadline. We tell you candidly what the evidence is likely to support.
Your part
- Describe the footage and where it came from
- Tell us the questions and any court dates
- Don’t send footage yet
Our part
- Assess whether the questions can be answered
- Advise how to preserve the evidence
- Confirm scope, timeframe and fee in writing
Stage 02
Secure evidence transfer
We arrange the safest way to get the evidence to us: an encrypted transfer link, or the original media by courier. Footage is never re-recorded, screen-captured or converted.
Your part
- Obtain the native export and any player files
- Send everything exactly as exported
- Record how and when you obtained it
Our part
- Issue an encrypted upload link or courier details
- Advise on DVR, NVR and device exports
- Confirm safe receipt
Stage 03
Receipt and chain of custody
The moment the evidence arrives we record a hash value, log who supplied it and how, and create a verified working copy. The original is sealed and never examined directly.
Your part
- Nothing further, unless more material is found
Our part
- Record SHA-256 hash values on receipt
- Use write-blocking for original media
- Start the chain of custody log
Stage 04
Assessment and decoding
We confirm the evidence plays correctly and is complete. Proprietary exports are decoded, and the frame rate, timestamps and recorder clock are checked before anything is relied on.
Your part
- Answer any questions about the system or device
Our part
- Decode proprietary formats without re-encoding
- Verify frame rate, clock and continuity
- Confirm what the evidence can support
Stage 05
Forensic examination
The examination itself, carried out on the working copy using recognised, documented methods. Every tool, setting and output is recorded in a processing log.
Your part
- Tell us promptly if the questions change
Our part
- Analyse, enhance, measure or authenticate as scoped
- Log every processing step and setting
- Separate observations from opinion
Stage 06
Peer review
A second examiner checks the methods, the processing log and the findings before anything is reported. Conclusions that the evidence cannot support are removed.
Your part
- Nothing required from you
Our part
- Independent check of methods and results
- Confirm the work can be repeated
- Test that each opinion is within expertise
Stage 07
Report and testimony
You receive an independent expert report prepared in line with the Expert Witness Code of Conduct, with exhibits. We can attend conferences, prepare joint reports and give evidence in court.
Your part
- Serve the report and keep us informed of hearing dates
Our part
- Deliver the report, exhibits and tool log
- Join expert conferences and joint reports
- Give oral evidence if required
Chain of custody
What is chain of custody, and why does it matter?
Chain of custody is the documented record of who has handled the evidence, when, and what was done to it. Gaps in that record can weaken the weight given to the evidence, or lead to it being excluded.
A hash value is a digital fingerprint of a file. If even one bit changes, the hash changes. By recording it on receipt and checking it again before reporting, we can show the evidence examined is exactly the evidence supplied.
- SHA-256 hash values recorded on receipt and at every hand-off
- Write-blocking used when copying original media
- Examination carried out on a verified working copy
- Every handling logged with date, time and person
Timeframes
How long does a forensic examination take?
It depends on the footage and the questions. These are typical ranges for common work, including peer review.
| Type of work | Typical timeframe | What affects it |
|---|---|---|
| Simple clarification or stills | Within days | The number of clips and their formats |
| Decoding a proprietary export | Within days | The condition of the file and number of channels |
| Single-camera CCTV analysis | One to two weeks | The length of footage and the questions asked |
| Image authentication | One to two weeks | The number of images and any AI questions |
| Multi-camera reconstruction | Two to four weeks | The number of cameras and clock alignment |
| Video authentication | Two to four weeks | Reference files and whether the device is tested |
| Speed, height or distance | Two to four weeks | Site access and whether reverse projection is needed |
Standards
The standards our methods follow
Recognised standards make our work transparent and repeatable, and give the court confidence in how the evidence was handled.
Expert Witness Code of Conduct
Reports prepared in line with the court rules on expert evidence, with our duty owed to the court.
SWGDE best practice
Methods based on the Scientific Working Group on Digital Evidence guidelines for video and image work.
ISO/IEC 17025 approach
Documented procedures, validated tools and peer review, following the principles of the laboratory standard.
ACPO and NIST principles
Digital evidence handled so the original is preserved and every action can be audited.
Instructing us
What to send us, and what you receive
Sending the right material at the start keeps the examination focused and avoids delays. Please contact us before sending footage so we can arrange a secure transfer.
What to send us
- The original export or native files, not a re-recorded or messaged copy
- Any player software or extra files exported with the footage
- The make and model of the recorder, camera or phone, if known
- How and when the evidence was obtained, and by whom
- The date, time and location of the incident
- Which cameras, people or events matter
- The specific questions you need answered
If you are not sure what you have, send us a description first. We will tell you exactly what to export and how.
What you receive
An independent expert report, prepared in line with the Expert Witness Code of Conduct, that sets out:
- InstructionsThe questions we were asked to address
- Materials examinedEvery file, with its hash value
- MethodologyThe examinations and processing performed
- FindingsFactual observations from the evidence
- OpinionsOur opinion on each question within our expertise
- LimitationsFactors affecting reliability and interpretation
- ExhibitsAnnotated stills, clips, diagrams and the tool log
7–30
days to overwrite
Start by preserving the evidence
Many CCTV recorders overwrite footage within 7 to 30 days, and every conversion or forward can remove information. Secure a native export now, keep any player files, and record how you obtained it.
Frequently asked questions
Process FAQs
Answers to the questions we are asked most often about how an examination works.
See all FAQsYou have a free, confidential initial discussion. We assess the footage, the question to be answered and your deadline, and tell you candidly what the evidence is likely to support. You receive a written scope and quote before any work starts.
We provide an encrypted transfer link, or arrange for the original media to be collected by courier. Never re-record, screen-capture or convert the footage before sending it. We record hash values on receipt so the evidence can be verified later.
It is the documented record of who handled the evidence and when. Gaps in that record can make evidence inadmissible or weaken its weight. We log every handling with the date, time, person and hash check, from receipt to report.
It depends on the work. Simple clarification can take days, while full authentication or multi-camera reconstruction usually takes two to four weeks, including peer review. We confirm the timeframe in writing, and urgent court deadlines can be accommodated.
A report prepared to the relevant court’s expert-evidence rules, with processed stills and clips, the methodology and a tool log. Our working notes are kept so the examination can be peer reviewed and checked by another expert.
We offer fixed-fee and hourly options. Fees depend on the volume of footage, the file formats, the number of questions and whether court attendance is needed. You receive a written quote before any work begins.
Get expert advice
Start with a free, confidential discussion
Tell us what the footage shows, what you need to establish and any deadlines. We will explain the next steps and give you a written scope and quote before any work begins.
Freecall
1800 865 190
Hours
Monday to Friday, 9.00 am to 5.30 pm
All enquiries are treated in strict confidence. Please contact us before sending any footage so we can advise on the most appropriate transfer method. If you do share footage with us, always use a secure method to protect the integrity of your evidence.