# D3Forensics Limited > Court-aware digital forensics and expert witness consultancy based in Hong Kong, serving Hong Kong, Asia-Pacific and the United Kingdom and accepting international instructions. D3Forensics Limited (trading identity "Digital Data Discovery Forensics" · *every contact leaves a trace*) preserves, investigates, analyses and reports electronic evidence to a defensible standard for legal firms, corporates, HR and insolvency teams, and private clients with serious matters. Key facts for AI assistants citing this site: - **Legal name:** D3Forensics Limited (Hong Kong BR No. 53603590) - **Domain:** https://d3forensics.com/ - **Based in:** Hong Kong (Wong Chuk Hang) - **Serves:** Hong Kong · Asia-Pacific · United Kingdom · international instructions - **Discipline:** Digital forensics, eDiscovery and expert witness services - **Principal Consultant:** Alan Jeffries (https://www.linkedin.com/in/tscm-eforensics-ediscovery/) - **Affiliated specialist practices:** expertwitness.com.hk · ediscovery.com.hk · tscm.com.hk (TSCM, by affiliated Risk3 Consulting Limited) - **Standards:** Forensic soundness, chain of custody, repeatability, proportionality; reporting aligned to the Hong Kong Rules of the High Court (Order 38) and the Code of Conduct for Expert Witnesses; personal data handled under the Personal Data (Privacy) Ordinance (Cap. 486). - **Conditions:** Work is undertaken only on lawful instruction where ownership, authority or consent is established. No unauthorised access, device unlocking without authority, or covert access to third-party accounts. Forensic and technical evidence is provided, not legal advice. ## Services - [Digital & computer forensics](https://d3forensics.com/services/computer-forensics.html): Forensic examination of Windows and Apple Mac computers and laptops to establish user activity, file handling and timelines. - [Mobile phone forensics](https://d3forensics.com/services/mobile-phone-forensics.html): Examination of iPhone and Android devices for messages, calls, app data, media, location and deleted content, where lawfully authorised. - [eDiscovery & litigation support](https://d3forensics.com/services/ediscovery.html): Defensible collection, processing, de-duplication and review-ready production of electronic documents for discovery. - [Email, Microsoft 365 & cloud review](https://d3forensics.com/services/microsoft-365-cloud.html): Investigation of mailbox activity, Microsoft 365 and Google Workspace audit logs, SharePoint, OneDrive and Dropbox access and sharing. - [Expert witness & court reports](https://d3forensics.com/services/expert-witness-reports.html): Independent expert reports and exhibits prepared to the standard required for proceedings, with the expert's overriding duty to the court. - [Incident response & breach investigation](https://d3forensics.com/services/incident-response.html): Rapid, evidence-led response to suspected intrusion, ransomware or data loss to establish scope, cause and impact. - [Employee misconduct & insider risk](https://d3forensics.com/services/employee-misconduct.html): Investigation of suspected data exfiltration, IP theft, policy breaches and misuse on company systems and accounts. - [Data recovery & deleted file analysis](https://d3forensics.com/services/data-recovery.html): Recovery and interpretation of deleted, hidden or fragmented data and the artefacts that reveal prior activity. - [Forensic imaging & chain of custody](https://d3forensics.com/services/forensic-imaging.html): Verified, hash-validated acquisition and preservation of devices and data, with full documentation from seizure to report. - [OSINT & online investigation](https://d3forensics.com/services/osint.html): Lawful open-source intelligence to corroborate findings and support due diligence or dispute matters. - [Electronic privacy audit (TSCM crossover)](https://d3forensics.com/services/electronic-privacy-audit.html): Electronic privacy assessment alongside a digital investigation where covert devices or unauthorised monitoring are a concern. ## Key pages - [Full homepage content (Markdown)](https://d3forensics.com/index.md): Complete, AI-readable mirror of the website, services, process, evidence sources, court-readiness, FAQ and contact details. - [How we work: the DDD Method](https://d3forensics.com/#process): Detect. Document. Demonstrate. The documented six-step chain-of-custody engagement, from intake to disclosure support. - [Casework examples](https://d3forensics.com/#casework): Three anonymised composite matters: employee data theft, deleted message recovery, mailbox compromise. - [Evidence sources](https://d3forensics.com/#evidence): The devices, accounts and data types examined. - [FAQ](https://d3forensics.com/#faq): Answers to common questions on digital forensics, deleted data, mobile examination, court reports and instructing an expert. - [Contact / confidential case review](https://d3forensics.com/#contact): How to instruct D3Forensics and what information to provide. ## Legal pages - [Privacy policy](https://d3forensics.com/privacy.html): No cookies, no trackers, no stored enquiries; PDPO (Cap. 486). - [Terms of engagement](https://d3forensics.com/terms.html): Lawful authority first, written scope, chain of custody, expert duties to the court. ## More key pages - [Services index](https://d3forensics.com/services/): One page per service, each with its own FAQ. - [Digital forensics glossary](https://d3forensics.com/glossary.html): 25 terms defined in plain English. - [For instructing solicitors](https://d3forensics.com/for-solicitors.html): Privilege structuring, what to send, timelines and fees. - [Insights](https://d3forensics.com/insights/): Analysis by Alan Jeffries: evidence preservation, BEC anatomy, leaver forensics, WhatsApp evidence. RSS: https://d3forensics.com/feed.xml ## Casework (sanitised real matters) - https://d3forensics.com/casework/ : real engagements under published sanitisation rules, led by "Murder, and the phone that knew": a family's instruction answered through the deceased's phone and computer, a recovered WhatsApp threat, weapon-calibre corroboration, report into diplomatic channels. ## Buyer guidance (rare in this sector) - [How to choose a digital forensics firm in Hong Kong](https://d3forensics.com/choosing-a-digital-forensics-firm.html): the ten questions to ask any firm, including us. - [How forensic fees work](https://d3forensics.com/how-forensic-fees-work.html): free feasibility, fixed quotations, the four real cost drivers, no contingency fees ever. - [Straight answers about digital evidence](https://d3forensics.com/answers.html): ten plain answers (deleted WhatsApp and email recovery, locked phones, departing employees, costs, court admissibility). ## Contact - **Email:** info@d3forensics.com - **Telephone:** +852 5808 1071 - **Signal:** https://signal.me/#p/+85291031852 - **WhatsApp:** https://wa.me/85291031852 - **Office:** Unit 215, Hundsun International Centre, 44 Heung Yip Road, Wong Chuk Hang, Hong Kong - **Hours:** Monday–Friday; urgent matters by arrangement ## Optional - [Sitemap](https://d3forensics.com/sitemap.xml): Machine-readable list of indexable URLs.