Evidence vault with chain of custody

The fastest way to lose a case is to gather the right evidence the wrong way. A screenshot with no provenance, a file copied without a record, a device that was used after the incident — each gives the other side an easy way to throw the evidence out.

Preserving evidence to a standard that survives challenge is exacting work, and it has to happen before anything changes.

Every item you bring into a project — a phone extraction, an account export, a document, an image — is hashed as it's ingested and stored in the case's vault. From that moment, SleuthX records what was added, when, and what was done with it, building a documented chain of custody alongside the investigation.

Because the hash is captured on ingest, the integrity of each item can be demonstrated later: the evidence in the report is provably the evidence that came in.

The vault is what lets a fast AI triage double as evidence-grade work. The same items the agent reads are preserved under custody, so a quick answer and a defensible record are the same artifact rather than two separate efforts.

When a matter moves toward litigation or an insurance claim, the preserved record is ready for the analyst — and, where needed, the licensed investigators in our network — to build on.