Forensic work starts from a suspicion or a complaint, not from a year-end timetable. We preserve what can be preserved, reconstruct what the books will still support, and write a report that a lawyer or a partner can use without us dressing up a guess as a fact.
How an assignment opens
A written brief of what is alleged, access to books and banks, and a named person who can authorise system access. We do not begin by interviewing the whole company. Scope first, then evidence. Since 2024 these files have stayed inside this office.
What the report will and will not say
We state what the records show, what they do not, and where we stopped. Related-party leakage, diverted receipts, and inventory that left without an invoice are the usual patterns. We are not the police and we are not your advocate.
Questions we are asked
Do you work for the company or a partner?
One side of the table, named in the letter. Conflict checks happen before we open the file.
Will you testify?
If the letter includes it and the work supports it. We will not expand a desk review into expert evidence after the fact.
Can you image a laptop?
We work with the records you can lawfully give us. Specialist imaging, if needed, is scoped separately. We do not pretend to be a cyber lab.