Criminal Defence
Defence-side digital forensics for Canadian criminal matters.
Independent forensic review and counter-analysis of Crown digital evidence. Examiner reports and trial testimony for the defence bar.
Typical matters
Where we are most often retained.
- Independent review of Crown forensic disclosure
- Examination of seized devices
- Cellebrite and EnCase report critique
- Mobile and computer forensic challenges
- Expert witness testimony at trial
- Charter applications involving digital evidence
Engagements we run
What this work looks like in practice.
- Independent review of Crown forensic evidence, including imaging artifacts, examiner reports, and tool output.
- Counter-analysis where the Crown's interpretation of digital artifacts is disputed.
- Independent forensic acquisition of devices in the accused's custody (where lawful).
- Expert testimony at preliminary inquiry, voir dire, or trial.
- Affidavit support for Charter applications and disclosure motions.
What clients tell us matters most
Priorities we hear from this industry.
Independence from the Crown. Many forensic firms are tied to law enforcement clients and may decline defence work. We do not have that conflict.
Tool-by-tool methodology review. The Crown's expert used Cellebrite, Magnet AXIOM, EnCase, or another tool. We know those tools. We can document where their interpretation matches the tool's output and where it diverges.
Charter sensitivity. Section 8 unreasonable search arguments often turn on how digital evidence was acquired. We document the acquisition methodology with that analysis in mind.
Defensibility under aggressive cross-examination. Crown counsel will test our methodology hard. Our reports and testimony are built to withstand it.
Services we provide for criminal defence
Most-engaged forensic services.
Mobile Forensics
iOS and Android extraction including chip-off, JTAG, and ISP techniques for damaged or locked devices that conventional tools cannot read.
Learn moreComputer Forensics
Forensic imaging and analysis of Windows, macOS, and Linux systems for litigation, internal investigations, and expert witness work.
Learn moreExpert Witness
Court-qualified expert witnesses delivering affidavits, expert reports, and trial testimony in Canadian civil and criminal matters.
Learn moreCommon questions
Criminal Defence questions we hear most.
Will you accept defence retainers?
Yes. Defence engagements are a core part of our practice. We do not have an exclusive Crown or law-enforcement relationship that would create a conflict.
Can you review and counter Crown forensic evidence?
Yes. The most common defence engagement is independent review of the Crown's examiner report and underlying acquisition. We document where the Crown's interpretation is supported by the artifacts and where it overreaches.
Can you testify at trial?
Yes. Our examiners are court-qualified and have testified in BC and Canadian courts. We prepare for trial through a pre-trial conference with counsel and review of opposing expert evidence where disclosed.
How does this fit with Stinchcombe disclosure?
The Crown's Stinchcombe disclosure obligation usually surfaces the underlying forensic image and tool output, which we then review. Where the disclosure is incomplete, we document what is missing and work with counsel on the next motion.
Are deleted messages always recoverable as evidence?
Not always. Recovery depends on the device, the OS version, the deletion method, and how much time has passed. We document what the artifacts can and cannot support, including the limits of any recovery.
Can you assess Charter issues with the acquisition?
We can document the acquisition methodology in detail. The Charter analysis is counsel's. The forensic record gives counsel the factual foundation for that argument.
Need an independent forensic expert for the defence?
Tell us about the matter, the disclosure, and the trial date. Our team will reach out as soon as possible.