Analysis workspace

Views built for the work, not for the storage format.

A database browser shows an examiner a table. A workspace shows them a conversation. The difference is the whole distance between a tool and something a laboratory will actually use every day.

  • Conversation, media and location views
  • Source path visible on every record
  • Recovered records marked as recovered

Viewers

Each evidence type gets a view designed for it.

Structured records appear in views built for the task. Messaging reads as a threaded conversation with attachments in place. Media appears as a gallery that can be searched by content. Locations appear on a map. Contacts and calls appear as the records an investigator expects to read.

The examiner moves between them without leaving the case, and the scope of a search follows them from view to view.

  • Messaging

    Threads with participants, timestamps, direction and attachments linked back to the messages that carried them.

  • Media

    A gallery indexed so it can be searched by what it contains, with attachments tied to their conversation.

  • Locations

    Position records placed on a map, with the source record one click away.

  • Contacts and calls

    The address book and the call record, reconstructed from whatever produced them.

ViewersLibrary applied
Messages12 418
Media31 902
Contacts1 204
Calls3 771
Locations9 640
Application activity48 115

Provenance

Every record shows where it came from.

Provenance is carried in the record itself rather than reconstructed when something is displayed. A citation resolves to its source row even after the mapping that produced it has been revised, which matters the first time a mapping is corrected halfway through a case.

Recovered records carry their recovery status alongside their provenance. A carved row is never presented as a live one, and an examiner never has to guess which they are looking at.

Language

The interface is in the language the report is written in.

VERA ships with its interface in 17 languages, covering the European Union plus Norway and Ukraine. An examiner working in their own language makes fewer mistakes and needs less training, and a laboratory does not have to negotiate a separate localisation contract to get there.

Evidence is processed in whatever language it was written in, independently of the interface language.

What is working today, and what is not

Working today

  • Messaging, media and geolocation viewers.
  • Contacts and call records.
  • Search available inside each viewer.
  • Provenance and recovery status carried on every record.
  • Interface in 17 languages.

In development

  • The full breadth of the viewer catalogue, including accounts, application activity, system events and web history.
  • Automatic timeline reconstruction across sources.
  • The full breadth of export and report generation.

See it running on a real extraction

Thirty minutes, on fictitious data, with time for your questions. If VERA does not fit what your service needs, that is a useful answer too.

Every request is reviewed before access is granted.