How to choose a digital forensics firm in Hong Kong

By Alan Jeffries, Principal Consultant, D3Forensics Limited

Every firm's website says the same things: certified, trusted, court-ready. Here are the ten questions that cut through the brochures, and the honest answers a firm should be able to give. Ask them of us too.

The ten questions

1. Who will personally examine my evidence?

A name, not a team page. If the person in the sales meeting is not the person at the write blocker, ask who is, and what their court history looks like. Here, the answer is Alan Jeffries, in every matter.

2. Have they given oral evidence, and where?

Reports are easy; the witness box is not. Ask which courts. Our expert reporting and oral evidence have been given to the courts of Hong Kong and Singapore.

3. What happens to the original evidence?

The only correct answer: nothing. Analysis happens on verified, hash-validated copies. If a firm cannot explain its imaging and chain-of-custody method in two sentences, the other side's expert will explain it for them.

4. Will they report findings that hurt your case?

An expert's duty is to the court, not to the client. A firm that promises helpful conclusions is offering you a report that will not survive cross-examination. Adverse findings, reported plainly, are the mark of evidence that stands.

5. Is the fee fixed before work begins?

Ask for a written scope with a costed estimate, and ask whether feasibility is assessed before any fee. Our answer is on one page: how forensic fees work.

6. Do they take contingency fees?

If payment depends on the outcome, the evidence is bought. No reputable expert takes success fees; ask anyway, and watch the reaction.

7. What will they refuse to do?

A firm with no refusals list has no boundaries you can rely on. Ours is published: no unauthorised access, no covert account access, no "partner's phone" work without lawful authority.

8. Can they preserve first and argue later?

Evidence expires: retention windows close, logs rotate, devices get reused. Ask how fast preservation can start, independent of the larger engagement.

9. Who else touches your data?

Subcontractors, overseas labs, cloud processors: each is a disclosure risk. Ask for the full list. Ours is short.

10. Can you understand their reports?

Ask for a redacted sample or read their published writing. A report the instructing solicitor cannot follow is a report the judge will not rely on. Our insights and glossary are written the way we report: plainly.

This guide names no competitors and needs not to; the questions do the work. General information, not legal advice.