Unfair competition and data theft
Establishing extraction of client databases, bulk copying ahead of a resignation, misuse of trade secrets and activity on corporate devices.
Service 05
Digital forensics and expert witness
An expert report is not written for the client who pays for it. It is written for the judge who will read it and for the opposing expert who will try to break it. That is the difference between a technical document and evidence that holds.
Criteria
Why electronic evidence collapses
Most computer forensic reports that are successfully challenged do not fail on the analysis. They fail earlier, in how the material was obtained. A screenshot of a conversation is not evidence; it is an image anyone can fabricate in two minutes.
- Acquisition with a verification hash taken at the moment of collection, and a record documenting the procedure followed.
- Continuous, documented chain of custody: who held the material, when, and what they did with it at every stage.
- Work performed on a forensic copy, never the original, with the original device preserved and available for comparison.
- Explicit separation in the report between what was observed, what was inferred and what is opinion. Blurring them is the error opposing counsel lives for.
Scope
Matter types
I work both for the party submitting the evidence and for the party attacking it. A well-built rebuttal is frequently more decisive than the original report.
Employment and commercial
Civil and criminal
Authenticity of electronic evidence
Verification or rebuttal of messaging, email, documents and metadata: manipulation, impersonation, altered timestamps and time-stamping.
Rebuttal
Challenging opposing evidence
Critical analysis of the other party's report: method, traceability, logical leaps and conclusions the submitted material does not support.
Court
Testimony and ratification
Defending the report at the hearing, answering the tribunal's questions and cross-examination, in language the court can follow.
Delivery
How an engagement runs
We act before any judicial district in Spain, with travel included in the quote. The court calendar does not wait: the sooner the material is preserved, the better the odds that the evidence is admissible.
01
Initial review
Assessment of technical viability before accepting. If the material does not support the case, I say so in the first conversation.
02
Preservation
Forensic acquisition with a formal record, before a notary where the procedure or the opposing party makes it advisable.
03
Analysis
Examination of a verified copy, documenting tool, version and a reproducible procedure.
04
Report
Drafted to the structure a tribunal expects, with object, method, findings and conclusions kept separate.
05
Testimony
Appearance in court, response to cross-examination and clarification of any point the tribunal requests.
FAQ
Frequently asked
Is a WhatsApp screenshot valid evidence?
On its own it carries very weak probative value, and Spanish Supreme Court case law has been demanding on messaging evidence precisely because it is so easy to manipulate. If the opposing party challenges authenticity, it must be established through analysis of the original device: the application database, metadata, internal consistency of identifiers and timestamps. That is the forensic work.
Where do you operate?
Anywhere in Spain. Expert engagements and court appearances are covered in any judicial district in the country, with travel included in the quote and no surcharge by province. On-site forensic acquisition takes place wherever the material is held; analysis and drafting follow in the laboratory. Much of the work is remote, so distance rarely affects the timetable. Proceedings outside the European Union are assessed case by case.
Can you review an expert report I already have?
Yes, and it is a common request. I review the opposing party's report — or your own expert's before you submit it — and tell you plainly what holds and what does not. If the report is sound, I will say so, even if that means there is no engagement. A rebuttal that attacks a well-built report only weakens the position of whoever submits it.
Which one fits your case?
Describe the environment and the reason behind the engagement. I will reply with the recommended mode and an estimated order of effort.