On-site recovery

When to have us come on site

• banks, insurers and financial institutions
• pharma, research and hospitals
• government, police and defence
• companies bound to secrecy towards their own clients
• servers or arrays too large or too critical to move
• cases whose chain of custody may not leave the building

One rule applies: your data does not leave your building, unless you expressly choose otherwise.

The mobile cleanroom

Opening a hard drive requires dust-free air. So we bring our own cleanroom, along with the reading equipment, write blockers, donors and tools. What happens in our lab in Ypres then happens at your place, under the same conditions.

We need little: a room that can be closed, a sturdy table and power sockets. We bring the rest, down to the packaging and the seals.

What stays, and what disappears

1. Your device Stays with you the whole time. The work happens on a copy that also stays with you.
2. Donor parts A donor drive we use has touched your data. We leave it with you, or destroy it on site.
3. Working copies All intermediate copies are destroyed after delivery, in your presence.
4. Certificate You get a destruction certificate, per device, with type and serial number.

So nothing leaves the building that you have not approved yourself.

How an intervention runs

1. Intake We go through the system, its condition, the amount of data and the planning.
2. Arrival and setup The cleanroom and equipment are set up in the room you provide.
3. Imaging Every device is copied write-protected; in several passes when damaged.
4. Recovery The actual work happens on the copies, with your IT manager present if you wish.
5. Delivery The data goes onto a device of your choice, encrypted if wanted, with a file list.
6. Closing Destruction of the copies and the donors used, certificates, and a short report.

More about our lab →