In some cases, a case-file server will fail, and/or one of the main drives for a case will stop functioning, and you may require the data to be retrieved quickly while maintaining privilege and keeping the information usable in court. Based in Belfast, our company has been providing legal data recovery services to solicitors and law firms throughout Belfast and the United Kingdom. All legal data recovery work is done using forensically sound methods utilising our U.K. laboratory, under non-disclosure agreements (NDAs), with documented chains of custody. Clients' confidential data remains within the U.K. at all times.
Data recovery services for case-file servers, fee earners' laptops/drives, etc. recovered by our engineering staff under NDA using documented chains of custody and methods acceptable to courts where evidence is required.
Whether it's your chambers file server or your partner's laptop which has stopped functioning, we can recover this type of data utilising our U.K. laboratory, while keeping the data privileged.
Recovery from practice management systems, document repositories, and/or lost matters due to RAID array failures or server crashes.
Recovered data (privileged) as well as email communications, drafts, etc. in cases where a machine is non-bootable.
Data (emails, docs, files) previously deleted can be recovered, for both disclosure and e-discovery purposes.
In addition to recovering data, we also recover court-admissible evidence while maintaining a documented "chain of custody" to ensure integrity in the event of litigation or investigation.
We have been successful in recovering data from BitLocker and other forms of encryption when you provide us with the necessary keys/credentials.
Backup drives which are no longer accessible; external media such as USB sticks that will not read; old documents etc., which are stored on obsolete or failed media.
See also: Forensic recovery · Servers · RAID · Encrypted drives.
Every time your data is dealt with it is done so in accordance with the legal professional privilege standard.
Further details regarding the way in which we handle your data can be found at Data security & confidentiality.
Where there is a possibility that the data could become evidence, it’s not just about getting the data back but also how you handle the data while it is being stored and transported. Every time we receive an item such as a hard drive, we document the receipt. Then when we open an item we document how we opened it; after we have used it we document how we returned it. All our images are done read-only, this way the original data was never changed. All data recoveries are done by us using forensically sound methods to ensure the recovery will be defensible. We can produce documentation detailing the process that has been followed if required, for example by the court, by the opposing party or by your clients. If appropriate, we can return data to you in a form that would enable it to be disclosed to others. Our documentation and forensically sound method of working are able to meet the standards required for cases within the courts of Northern Ireland, and where a case is taken to another part of the United Kingdom or the Republic of Ireland we can also operate to meet their requirements.
A safe route for your data from the moment of failure until its verified, privileged handover.
Just call or send an email about what has occurred and we will tell you the safest step to take.
Send your failed device into us via post (insured) or drop it off. Once received, we will identify why the device has failed and determine which parts of the data can be successfully recovered.
You will always receive a fixed written quote and know how long recovery will take before any chargeable work begins.
In house, we recover and verify the information and return your data to you on new encrypted media or through a secure download.
Additionally, we operate with: Healthcare; Finance; University & research; and Business & enterprise.
Send or drop off your item for a free diagnostic check with a description of the issue. One of our engineers will review the item, then provide you a written quote prior to doing any repairs.
Prior to sending or dropping off your device for a diagnostic test (free), obtain a quotation from us via telephone or using the provided form. Step one: get the device to our Belfast bench. Carefully wrap the device and include your contact information inside the parcel. Then send it over. There is no charge for this diagnostic service. Once we receive it, you will be given a firm written price to confirm whether you wish to go ahead, before any work is done.
Sending it? The use of a tracked, insured delivery method would be recommended. Alternatively, dropping it off can also be done Monday to Friday, 9am–5:30pm; no prior booking required but do ensure that all items are packed accordingly.
Still waiting to send something? Please complete the form describing the failure/fault in your own words and one of our engineers will get back to you with a quotation based upon your individual circumstances.
We will get back to you soon. If it is urgent, call 028 9002 0144.
The most commonly asked questions, answered briefly.
Yes. A non-disclosure agreement (NDA) comes as standard with every legal client for free. All of the work is conducted in house by our team of engineers. We are registered with the Information Commissioner's Office (ICO), compliant with GDPR and your data remains within the UK at all times.
Yes. Every single device receives a record of receipt, processing and return, all images are read-only therefore the original drive has never been altered and we have the ability to pass documentation through to the courts, opposing party/client etc.
Our methods of forensic recovery are carried out using forensically sound methodologies and we use read-only methods when creating an image copy of the drive so that the original drive has never been modified, and we document each stage of the process, which is defensible. Ultimately the admissibility of evidence is down to the courts however our method of recovering data is to a level that would withstand examination/scrutiny.
As a rule, yes: this is based on the type of device, and whether the data has been overwritten. Deleted emails, documents and files can usually be recovered and returned as per your request in whatever format fits your needs, such as disclosure or e-discovery purposes.
Our normal business hours are Monday to Friday from 9am until 5:30pm. However, legal work which is time-sensitive will always receive priority over other cases. In most cases, a recovery takes 3 to 4 working days, although often it's quicker.
The cost of recovering your data is determined by the type of device used; single drive forensic analysis begins at £800 (plus VAT). RAID & NAS analysis begins at £1200 (plus VAT). General forensic analysis begins at £800 (plus VAT). All prices include a free diagnostic and written quote.
Yes. We operate out of an office in Belfast and provide data recovery services to solicitors and law firms throughout Northern Ireland and the rest of the United Kingdom. After receiving a quote we can accept devices for drop off at our Belfast office (no appointment required), or you can post them to us using a fully insured postage service from anywhere in the U.K., without your data leaving the U.K. at any stage.
For a completely free diagnostic and a written quote please get in touch: all communications will be treated under Non-Disclosure Agreement (NDA); all data recovery will be performed within our own laboratory located within the U.K.; a documented chain of custody will be provided wherever you require it.