What does that include?

The scoping call

Fifteen minutes to work out what's needed, who the custodians are, and what's actually reachable.

The collection

Up to four mailboxes or repositories, or one service. Collected through the platform's own interfaces, with nothing installed.

Your evidence

In a format you can open without specialist software.

Chain of custody

How it was collected, under whose authorisation, what was in scope — and anything we couldn't reach, written down.

Hash list

A signature for every file, so any exhibit can be checked later against what we collected.

Item manifest

A readable index of the whole collection.

Secure delivery

A password-protected bundle, held for 90 days, then deleted.

Quoted before we start. If the scope turns out to be wrong, you'll hear it before we begin rather than on the invoice.