Evidence certification · Mobile phone
Mobile phone forensics and expert reports
We extract the contents of a phone — messages, calls, photos, locations, apps and, where possible, deleted data — with Cellebrite and without altering the device. Acquisition record, SHA-256 hashes and signed expert report.
- iPhone and Android
- Extraction without altering the phone
- Expert no. 02714
Updated on 26 September 2026
What is extracted
Everything a phone holds
A forensic extraction reads the system and app databases: far more than what is on the screen, without modifying the device.
WhatsApp, Telegram, SMS and other apps, with their timeline.
Call log, duration and address book.
Original files with their date and device metadata.
Location history, where the system records it.
What was installed and which accounts it was used with.
Recoverable in many cases, depending on the model and how the phone has been used since.
Common cases
When it is needed
- Company phone of an employee who is leaving
- Data leaks and unfair competition
- Harassment, threats and family proceedings
- Scams and impersonation
- Counter-expert report on an analysis submitted by the other side
How it works
From the first message to the signed report
-
01
Triage
Model, condition of the phone and what needs to be found. We tell you how to preserve it: aeroplane mode, and stop using it.
-
02
Acquisition in your presence
Extraction with Cellebrite, signed record and SHA-256 hash. The phone goes back with you.
-
03
Analysis
Search for what matters to the case, recovery of deleted data and timeline.
-
04
Report
Signed report, with availability to confirm it in court.
What you receive
A report your lawyer can file without changes
- Expert report signed by court expert no. 02714
- Acquisition record and extraction report
- SHA-256 hash annex
- Forensic copy kept in custody
Frequently asked questions
Before you instruct us
Do you need the phone's PIN or pattern?
In most cases, yes: with the phone unlocked the extraction is more complete and faster. If you do not have it, we assess the model before quoting.
Can deleted data be recovered from a phone?
Often, yes, especially if the phone has not been used much since. It depends on the model and the operating system; we tell you after triage.
What if the phone is broken or will not turn on?
We assess it in the laboratory before quoting. If extraction is not possible, we examine backups or linked accounts, and the report explains their limitations.
Can you analyse a company phone used by an employee?
Yes, when the phone belongs to the company and the legal limits on the employee's privacy are respected; these are best reviewed with your lawyer beforehand.
We serve Elche, Alicante, Murcia, Valencia and the whole of Spain.
Carrer Santiago Ramon y Cajal, 41 · Modulo 1, planta 1, local 13
03203 Elche · +34 965 56 38 00
WhatsApp, email, phones, drives, social media and websites: extraction, hash and signed expert report.
View page Signed by IT expert witnessAccreditation no. 02714, methodology and courtroom experience.
View page
