A public description of how authorised client artefacts move from qualification to controlled transfer, isolated analysis, reviewed output and contracted return or destruction.
The public website stays outside the evidence path
This public website never accepts evidence
Secure transfer is agreed only after authorisation and scoping are complete, using a separate, private channel.
Assessment and incident forms collect contact details, routing information and a high-level summary. They are not upload portals, evidence repositories or authorisation mechanisms.
Public evidence-handling lifecycle
01 · Qualify
Confirm authority, purpose and sensitivity using metadata only.
02 · Transfer
If work proceeds, agree a private channel outside this public website.
03 · Isolate and analyse
Keep technical analysis separate from the website and ordinary business systems.
04 · Review and export
Review reports and indicators before authorised delivery.
05 · Return or destroy
Follow the retention and destruction rules agreed in the contract.
Details agreed for each engagement
Transfer method, custody records, access, retention, output delivery and destruction evidence depend on the artefact, sensitivity, client requirements and approved operating model.
Further operating facts
Hours, telephone, insurance, panels and similar claims are published only when they can be evidenced. They are omitted here rather than guessed.