How We Work
Our Process
A controlled engagement from conflict and authority review through preservation, analysis, delivery, and closeout.
A repeatable process protects the evidence and the client.
The exact technical steps vary by matter, but the control points remain consistent: confirm authority, define the question, preserve the right sources, document the work, validate material findings, and deliver outputs suited to their intended use.
Inquiry, conflict, and authority review
Identify parties and counsel, requested service, deadline, legal authority, consent or ownership, potential conflicts, jurisdiction, and material restrictions. Sensitive facts and evidence are not requested through the public form.
Scoping and engagement plan
Define the factual questions, devices and systems, custodians, dates, preservation risks, collection method, deliverables, assumptions, exclusions, schedule, and responsibilities. Work can be phased to control cost and risk.
Secure intake and preservation
Establish approved transfer or physical intake; document source identifiers, custody, condition, handling, and preservation steps; and verify forensic acquisitions where applicable.
Processing, examination, and quality control
Apply appropriate tools and methods, preserve logs, document material settings and warnings, validate high-impact findings, reconcile time and source context, and identify limitations.
Delivery, briefing, and closeout
Provide agreed reports, exports, review packages, inventories, or briefings. Confirm receipt, answer reasonable follow-up, address evidence return or retention, and document closeout.
Controls that travel with the matter
Security and quality are not add-ons.
Need-to-know access
Limit matter information and evidence access to authorized personnel and approved systems.
Provenance & custody
Track sources, acquisitions, transfers, working copies, transformations, and material decisions.
Validation
Use appropriate hashes, logs, cross-checks, repeatable steps, peer review, and exception documentation.
Closeout
Resolve delivery, retention, return, destruction, access removal, and follow-up expectations.
Can TIERS Group start before every source is known?
Yes. A scoped first phase can identify likely sources, preservation risk, authority questions, and the highest-value next step without committing to a broad collection.
Does every matter require a full forensic image?
No. The method should match the question, source, authority, risk, and downstream use. Some matters require a forensic image; others may be answered with a targeted, validated export or preservation step.
Can evidence be uploaded through the website?
No. The public site is for initial contact only. Secure transfer or physical intake is arranged after conflict, authority, scope, and handling requirements are addressed.
How are changes to scope handled?
Material changes to sources, questions, methods, deliverables, schedule, or risk are documented and approved before expanded work proceeds.
Ready to define the first phase?