Digital Forensic Evidence Collection & Preservation Services

We Can Recover Data From All Damaged, Corrupted & Infected Devices, Both Personal & Business.

A defensible case starts with reliable evidence. This is why preservation is one of the most important aspects of digital forensics.  If a device is tampered with after a significant event, it is just like walking through a crime scene and leaving your fingerprints everywhere.  Our preservation and collection techniques are completely write-protected and verifiable with complex hash algorithms. Each collection is also tracked with strict chain-of-custody protocols to ensure all evidence accountability. This allows for a level of safety while we work to retrieve data from your mobile device.

Get The Digital Evidence You Need

Our team has experience gathering and preserving digital forensics evidence to support your case. With Flashback Data, you get expert services and an experienced expert witness!

A forensically sound collection is important whether you have a single mobile device or hundreds of computers in an organization.  We have the ability to capture data quickly:

  • Email Servers
  • Desktop or Laptop Computers
  • Network Shares
  • Mobile Devices
  • Backup Devices

Reliable evidence is necessary to defend a case. To be able to have reliable evidence, data needs to be preserved well. This is one of the most important factors of digital forensics because if a device isn’t clean or if it has been tampered with, then it may destroy some of the data and make it difficult to analyze.

This digital data is retrieved with our mobile device data recovery processes. When our standard forensic tools fail to recover data, we use JTAG and chip-off level forensics.

Flashback Data™ Is Recognized for Data Recovery Expertise:

PC World
Digital Trends


J-Tag & Chip-Off Forensics

Flashback data use several advanced techniques in our data recovery lab to assist our forensic investigators with their investigations when our standard forensic tools either do not support a device or cannot get past a passcode-locked device, including J-Tag and Chip-Off forensics.

What is JTAG?

JTAG (Joint Test Action Group) is a data extraction process where wires are connected to Test Access Ports (TAPs) on a mobile device, and raw data is transferred to connected memory chips. When the device is supported, this is an excellent technique to retrieve data.

What is Chip-Off Forensics?

When JTAG doesn’t work, data recovery can be achieved through chip-off forensics. This is a more advanced technique that requires physically removing the memory chip from the device. This is a method with a high success rate, but it is usually a last resort because it is more invasive. However, it works on almost every device, no matter how advanced the damage.

By collecting and preserving evidence well, we can safely retrieve data from your mobile device.

Choose the Data Recovery service with a proven history of success!

Flashback Data understands the importance of evidence preservation.

What Data Can be Retrieved from These Devices?

Desktop and laptop computers hold a large amount of information. Our data recovery services can retrieve data such as emails, search histories, and online documents. It is possible to retrieve deleted data as well. When data is found to support a legal case, it is used as potential evidence to work against an offender.

We can retrieve files from network shares. This can also apply to deleted files. On mobile devices, data recovery may result in retrieving text messages, phone logs, photos, GPS location and search histories from mobile search engines. This data can also be used as evidence in a court case. However, when these methods don’t work, it’s time to turn to JTAG and chip-off level forensics.


Flashback Data has worked for clients around the world since 2004 on sensitive incident investigations and forensic data recovery services. We have worked for corporations, law firms, and foreign governments.

We have an ISO/IEC 17025:2017 laboratory that is accredited by the American Society of Crime Laboratory Directors. We also have several certifications:

  • Certificate | ALI-113-T
  • Field of Accreditation | Forensic Science Testing
  • Discipline | 9.0 Digital and Multimedia Evidence

Our personnel are experts in law, criminal investigation, intelligence, fraud examination, and information systems and security, and our forensic examiners are highly credentialed in many fields.

If you have devices you need collected, please contact us at 866.786.5700 today to speak with someone about your project.

Our Forensics Process

We have streamlined our forensics process to make it similar to how an investigation works. Not every investigation is the same, but there are similarities.

Before beginning an investigation, we will meet to discuss case objectives and create a detailed work statement.

No matter how many devices are involved in the case, the next step will be to preserve the evidence and begin a chain of custody through verified copies of evidence. This will help track the movements to and into our lab and save the original data.

The investigation is where the main work happens. Our experts will retrieve data, analyze it, take notes, and build a credible story with the data.

When the investigation is complete, we compile everything into a report explaining our findings, which are clear and easy to understand for people with different levels of technology knowledge.

Our experts can testify in court on the case findings if needed.

That’s it! If you have any questions, feel free to contact us at any time.

Data Recovery

We Retrieve Your Data from Damaged, Hacked & Corrupted Devices for Consumers & Business

Data Forensics/Investigations

We Recover Lost & Hidden Data on Devices & Accounts for Attorneys, Law Enforcement & Governments