Authenticity assessment
Email authenticity and alteration
Examine whether a disputed message is consistent with its claimed origin and history, and identify what the available evidence cannot resolve.
Read more →Our services
Define what needs to be established before choosing the collection or analysis method. Scope, authority and feasibility are agreed for every instruction.
Original content baseline 6 November 2026 · Content revision 0.3
Authenticity assessment
Examine whether a disputed message is consistent with its claimed origin and history, and identify what the available evidence cannot resolve.
Read more →Preserve the available record
Identify suitable evidence sources and collect an agreed scope with a record of the method, limitations and changes introduced.
Read more →Recovery feasibility
Assess whether relevant correspondence survives and distinguish recovered deleted material from copies found elsewhere.
Read more →Reconstruct the communication
Examine disputed payment instructions and available account records to assess how an email chain may have been manipulated.
Read more →Proportionate examination
Examine authorised email evidence relevant to a defined concern about disclosure, deletion, diversion or account use.
Read more →Reconcile the record
Compare supplied message sets, explain differences and reconstruct relevant sequences without assuming either collection is complete.
Read more →Examine the document in context
Assess attachment versions and their relationship to messages, while treating cloud links as a separate historical evidence question.
Read more →From source to review
Prepare email evidence for an agreed review or disclosure workflow while retaining its provenance and relevant relationships.
Read more →Explain the findings
Agree a report that answers the instructed technical questions, identifies its evidence base and makes limitations clear.
Read more →Start with the question
A brief account of the issue, the available sources and the relevant dates is enough to begin.