Home / Legal framework

Legal framework and confidentiality

We work with some of the most sensitive data there is. The rules below apply to every request, whoever the applicant.

01Rules that apply

Basis: the owner's consent
A device is analysed only with the written consent of its owner or legal representative. Without consent, the device is not accepted.
Data protection
Data is processed under Regulation (EU) 2016/679. Details are in the Privacy policy.
Retention and erasure
Device content is kept only for the duration of the analysis. Working copies are erased at handover, with written confirmation, unless otherwise agreed in writing.
No online transfer
Analysis happens in the laboratory. Device content isn't uploaded to the cloud and isn't sent to third parties.
Confidentiality
Staff are bound by confidentiality. For organisations, a separate confidentiality agreement is signed on request.
Limits of the analysis
The report is a technical report. It is not a court-appointed expert opinion and doesn't replace one.

2.1

We don't analyse devices without the consent of the owner or legal representative.

2.2

We don't bypass passcodes or use methods that change the device.

2.3

We don't keep copies of the content after handover, unless asked to in writing.

2.4

We don't give third parties access to the data or use it for anything other than the agreed purpose.