Data recovery services

Cases the software cannot finish on its own are handled by our own lab, under the same rules: the source is read-only, results are verified against the original where an original exists to compare with, and the assessment states what is not recoverable as clearly as what is.

Become a partnerRead the FAQ
Scope

What we take on.

Hard disks and SSDsDeleted, formatted, corrupt, repartitioned
Memory and SD cardsCameras, phones, dashcams, drones
USB and externalPen drives, portable and desktop drives
RAID, NAS and servers0/1/5/6/10/50/60, JBOD, auto detect
Virtual machinesVMware, Hyper-V, VirtualBox, QEMU
Database serversMySQL, SQL Server, Postgres, Oracle, Mongo
Phones and tabletsAndroid and iOS, logical + physical in-lab
RAM and live memoryKeys and artefacts from a capture
Cloud and syncOneDrive, Drive, Dropbox, Box, S3
CCTV and DVRHikvision, Dahua, raw H.264/H.265
Ransomware-hitTriage, salvage, honest verdict
Images and clonesdd, img, iso, E01, full-disk clones
Our services

Pick the level of help you actually need.

Software

Self-service software

Do it yourself. The Imager checks and browses a drive for free; a key unlocks saving files.

  • Free check, image and browse
  • Guided Easy Cards
  • Licence key priced for India
Remote

Guided remote recovery

A specialist works the case with you on your own machine.

  • Screen-shared with an engineer
  • Nothing leaves without approval
  • Fixed-scope quote first
Incident

Ransomware response

Family ID, a realistic plan, and a written verdict.

  • Family identification day one
  • Shadow copy, backup, original hunting
  • Written verdict on outcomes
Lab

Database and server rescue

Emergency recovery for corrupt production databases.

  • MySQL, SQL Server, Postgres, Oracle
  • Page and row extraction, log replay
  • Live-vs-dead and backup-first advice
Lab

Failing and damaged media

Careful imaging of weak drives, then recovery from the image.

  • Three-pass imaging, skip map
  • Source read once
  • Clean-room for mechanical damage
Forensics

Acquisition and reports

Write-blocked imaging and a court-ready report.

  • E01 imaging, SHA-256, audit trail
  • Chain of custody with offsets
  • Expert statements
How an engagement works

Clear steps, and a quote before any charge.

01

Tell us what happened

What the device is, what happened, and what you need back. We say up front whether software or the lab is right.

02

Safe evaluation

We image the media read-only and assess what is recoverable, then send a fixed-scope quote. No surprise charges.

03

Recovery

We recover from the image, verify byte-exact where provable, and keep you posted on what is coming back.

04

Handover

Your data on fresh media, a report of what was and was not recovered, and honest reasons for anything lost.

Speak to an engineer about the case

Start with the free software, or bring us the case that has you worried. You get a straight answer either way.

Become a partnerSee the forensics workflow